Privacy Policy

Last updated: January 2025

1. Introduction

Revenue Boost (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application for popup campaigns, email collection, SMS marketing, cart recovery, and promotional tools.

2. Information We Collect

When you install and use Revenue Boost, we may collect:

  • Store Information: Your Shopify store domain, email, and store settings necessary to provide our services.
  • Campaign Data: Popup configurations, targeting rules, and design settings you create.
  • Analytics Data: Popup impressions, clicks, and conversion metrics.
  • Visitor Data: Email addresses and phone numbers collected through your popups (with explicit consent).
  • Cart Data: Abandoned cart information for cart recovery features.
  • Order Data: For revenue attribution and analytics.

3. SMS and Phone Data (TCPA Compliance)

When customers opt in to SMS marketing through your popups:

  • We collect phone numbers only with explicit, documented consent
  • Consent language is displayed before phone number collection
  • Customers can opt out at any time by replying STOP to any message
  • Phone numbers are used only for the purposes disclosed at opt-in
  • We maintain records of consent for compliance purposes

Message frequency: Varies based on merchant configuration. Message and data rates may apply.

4. How We Use Your Information

  • To provide and maintain our service
  • To display popups on your storefront
  • To generate analytics and reporting
  • To send SMS cart recovery messages (with consent)
  • To send WhatsApp cart recovery messages (with consent)
  • To send transactional emails
  • To verify phone numbers via OTP
  • To improve our application
  • To communicate with you about your account

5. Cookies and Local Storage

We use cookies and browser local storage to:

  • Track popup display frequency to prevent over-showing
  • Remember visitor preferences and popup dismissals
  • Maintain session state for proper campaign functionality
  • Generate anonymous visitor identifiers for analytics

These are essential for app functionality and cannot be disabled while using our service.

6. Data Storage and Security

We use industry-standard security measures (TLS 1.2+ encryption) to protect your data. Campaign data is stored securely in our database with encryption at rest. We do not sell or share your data with third parties for marketing purposes.

7. Data Retention

We retain your data as long as your app remains installed. Upon uninstallation, we delete your campaign data within 48 hours in accordance with Shopify's requirements. SMS consent records may be retained longer as required for TCPA compliance documentation.

8. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to data processing
  • Data portability
  • Withdraw consent at any time

Our popups support consent collection features to help you comply with privacy regulations.

9. Your Rights (CCPA)

If you are a California resident, you have the right to:

  • Know what personal information we collect about you
  • Request deletion of your personal information
  • Opt out of the sale of your personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

10. Sub-Processors and Third-Party Services

We use the following third-party services:

  • Shopify - E-commerce platform and API access
  • Twilio - SMS messaging, phone verification (OTP), and WhatsApp OTP
  • Meta (WhatsApp Business API) - WhatsApp cart recovery messaging
  • SendGrid (Twilio) - Transactional email delivery
  • Resend - Backup email delivery provider
  • Cloud hosting provider - Database and application hosting

Each sub-processor processes data only as necessary to provide their services.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The “Last updated” date indicates when the policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]