Privacy Policy

1. Introduction

Rev Room ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our analytics dashboard service ("Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

• Account Information: Name, email address, password, and other registration details. When you install Rev Room from the Shopify App Store, we create your account automatically using the email address associated with your Shopify store (see Section 13) rather than asking you to register separately.
• Profile Information: Business name, contact information, and preferences
• Payment Information: Billing address and payment method details (processed through secure third-party payment processors)
• Communication Data: Messages, feedback, and other communications you send to us

2.2 Data from Connected Platforms

When you connect your accounts to third-party platforms, we collect and process data from those platforms, including:

• Shopify Data: Orders, products, customers, inventory, sales analytics, and store performance metrics
• Facebook Ads Data: Campaign performance, ad spend, impressions, clicks, conversions, and revenue data
• Google Ads Data: Campaign metrics, cost data, click-through rates, conversion data, and performance analytics
• TikTok Ads Data: Advertising spend, campaign performance, engagement metrics, and conversion data

This data is collected through secure OAuth connections and API integrations with your explicit authorization.

2.3 Automatically Collected Information

We automatically collect certain information when you use the Service, including:

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: Device type, operating system, browser type, and device identifiers
• Log Data: IP address, access times, error logs, and system activity
• Cookies and Tracking: Cookies, web beacons, and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage your account
• Generate analytics reports, insights, and recommendations
• Calculate profit metrics and performance indicators
• Sync and aggregate data from connected platforms
• Send you service-related communications, updates, and notifications
• Respond to your inquiries, comments, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Personalize your experience and provide relevant content

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (e.g., Vercel, Supabase)
• Payment processors for billing and transactions
• Analytics and monitoring services
• Customer support and communication tools

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Legal processes, court orders, or government requests
• Enforcement of our Terms of Service or other agreements
• Protection of our rights, property, or safety
• Protection of the rights, property, or safety of our users or others

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure storage of OAuth tokens and API credentials

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain accurate business records

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes. Some information may remain in backup systems for a limited period.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze usage patterns and improve the Service
• Provide personalized content and features

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the Service.

8. Third-Party Platforms

The Service integrates with third-party platforms (Shopify, Facebook, Google, TikTok). When you connect these accounts:

• You authorize us to access and process data from these platforms
• Your use of third-party platforms is also governed by their respective privacy policies
• We only access data necessary to provide the Service
• You can revoke access at any time through your account settings or the third-party platform

We are not responsible for the privacy practices of third-party platforms. Please review their privacy policies to understand how they handle your information.

9. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in Section 16. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information receives adequate protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a notice within the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Shopify Data & GDPR Requests

When you install Rev Room from the Shopify App Store, we automatically create a Rev Room account for you using the email address associated with your Shopify store and sign you in, so you can use the app immediately without a separate registration step. You can set or change your password at any time from your account settings.

Rev Room is a Shopify app and handles Shopify's mandatory data-protection requests. When you or one of your customers exercises a data right through Shopify, Shopify notifies us via secure, verified webhooks and we respond as follows:

• Customer data request: if a customer asks what personal data we hold, we provide the data associated with that customer from your store, via you as the merchant, within 30 days of receiving the verified request.
• Customer data erasure: when a customer requests deletion, we delete that customer's personal data from our systems and caches.
• Shop data erasure: when you uninstall Rev Room, we deactivate your store connection, revoke stored access tokens, and delete or purge your store's cached data (Shopify sends this request about 48 hours after uninstall).

We only access the Shopify data needed to calculate your analytics (orders, products, customers and related records), access tokens are stored encrypted, and we retain data only while your store is connected. Uninstalling the app stops all data collection and begins deletion. To make a request directly, email hello@revroom.app.

14. New Zealand Privacy Rights

Rev Room is operated by NZ Brandz Limited, a company registered in New Zealand. We handle personal information in accordance with the New Zealand Privacy Act 2020 and its Information Privacy Principles. Under the Act, you have the right to:

• Request access to the personal information we hold about you
• Request correction of that information if it is inaccurate, incomplete, or out of date

We collect personal information only for lawful purposes connected with the Service, use and disclose it only for those purposes, and take reasonable steps to keep it accurate and secure. Where we disclose information to overseas service providers (see Section 11), we take reasonable steps to ensure it is protected by comparable safeguards, consistent with Information Privacy Principle 12.

If we experience a privacy breach that is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected individuals as required by the Act. If you are not satisfied with our response to a privacy request, you may complain to the Office of the Privacy Commissioner (privacy.org.nz).

15. Australian Privacy Rights

For users and customers in Australia, we handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You have the right to:

• Request access to the personal information we hold about you
• Request correction of that information

We notify you of the kinds of information we collect and why (see Sections 2–3), only use or disclose it for the purposes described, and take reasonable steps to protect it (see Section 5). Where we disclose information to overseas recipients (see Section 11), we take reasonable steps to ensure they handle it consistently with the APPs.

In line with the Notifiable Data Breaches scheme, if a data breach is likely to result in serious harm we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC). If you have a complaint about how we handle your personal information, you may contact us (Section 16) or lodge a complaint with the OAIC (oaic.gov.au).

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Entity: NZ Brandz Limited
Address: 28 Greys Avenue, Grafton, Auckland, New Zealand
Email: hello@revroom.app
Website: revroom.app

You may also raise a privacy complaint with your local regulator: in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz); in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).