Privacy Policy

Last updated: April 26, 2026

EcomRevHub ("we," "us," or "our") operates ecomrevhub.com and the EcomRevHub platform (the "Service"). This Privacy Policy explains how we collect, use, and protect your information. By using the Service, you agree to these terms.

1. Information We Collect

Information you provide:

• Account: First name, last name, email, company name, and password.
• Billing: Payment data processed securely by Stripe. We never store raw card numbers.
• Store connections: OAuth tokens for Shopify, WooCommerce, BigCommerce, etc. Stored encrypted.
• Support: Messages you send to our team.

Collected automatically:

• Usage data: pages visited, features used, AI actions taken, session duration.
• Device data: IP address, browser type, OS, referring URL.
• Cookies: session tokens, preferences, analytics identifiers. See Section 7.

2. How We Use Your Information

• To create and manage your account and deliver the Service.
• To process payments via Stripe and send billing receipts.
• To generate AI-powered insights and execute autonomous agent actions on your behalf.
• To send transactional emails (confirmations, password resets, usage alerts).
• To send marketing emails — you may opt out at any time.
• To improve Service performance, security, and reliability.
• To comply with legal obligations.

3. Legal Bases (GDPR)

For EEA/UK/Swiss users: Contract performance (delivering the Service), Legitimate interests (security, improvement), Consent (marketing, non-essential cookies), and Legal obligation where required.

4. Third-Party Processors

We do not sell your personal data to any third party for advertising purposes.

5. Data Retention

We retain your account data while your account is active. After cancellation, data is held 90 days for recovery, then permanently deleted. Billing records are retained 7 years per tax law. Request earlier deletion at privacy@ecomrevhub.com.

6. Your Rights

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion ("right to be forgotten").
• Portability: Receive your data in a machine-readable format.
• Objection / Restriction: Object to or restrict certain processing.
• CCPA (California): Opt out of the sale or sharing of personal information. We do not sell personal information.

Email privacy@ecomrevhub.com with subject "Privacy Request." We respond within 30 days.

7. Cookies

• Essential: Required for authentication. Cannot be disabled.
• Analytics: Help us understand usage. Require consent.
• Marketing: Measure ad effectiveness. Require consent.

Manage preferences via the cookie banner on your first visit.

8. Security

We use TLS 1.3 for data in transit and AES-256 for data at rest. Access controls, regular security reviews, and short-lived session tokens protect your account. In the event of a breach affecting your rights, we will notify you as required by law.

9. International Transfers

Your data may be processed in the United States. For EEA/UK users we rely on Standard Contractual Clauses or equivalent mechanisms. Contact us for a copy.

10. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from children. If we become aware of such collection, we will delete it promptly.

11. Changes

We may update this policy. For material changes, we will email registered users 30 days before they take effect.

12. Contact