Eulav builds Revvy, an autonomous conversion rate optimisation practitioner for ecommerce stores. This policy explains how we handle information across our website and product.
The short version
- Revvy reads store performance data, never customer payment information, passwords or personal data
- We do not sell personal information to anyone, ever
- You can ask us to delete your data at any time and we will action it
Information we collect
Information you give us
When you create an account or contact us we collect your name, email address, company name and billing details. Billing is handled by our payment processor; we do not store full card numbers on our systems.
Store performance data
When you connect a store, Revvy reads information needed to find conversion problems: page structure and content, template and theme configuration, technical performance such as load times and JavaScript errors, aggregated traffic and conversion patterns, and product and collection page layouts.
Revvy does not access customer payment information, customer passwords or account credentials, personally identifiable customer data, or your order or financial records.
Website usage
We use analytics to understand how visitors use eulav.io, including pages viewed, approximate location derived from IP address, browser and device type, and referring source. Cookie preferences are managed through the consent banner on your first visit.
How we use it
- To run Revvy and identify conversion opportunities in your store
- To provide support and respond to questions
- To process payments and manage your optimization capacity balance
- To send service updates, and marketing only where you have opted in
- To improve the product in aggregate
We do not use your store data to train models that serve other customers without your explicit consent.
Sharing
We share information only with service providers who help us operate: hosting and infrastructure, payment processing, analytics, and customer communication. Each is bound by contract to protect your data and use it only for the service they provide to us.
We may disclose information if legally required, or as part of a merger or acquisition, in which case you will be notified before your data becomes subject to a different policy.
Compliance
We operate in line with GDPR for European users, CCPA for California residents, and PIPEDA for Canadian users, and we maintain SOC 2 aligned security controls.
Your rights
- Access a copy of the personal data we hold about you
- Correct anything inaccurate
- Delete your data, subject to legal retention requirements
- Export your data in a portable format
- Object to processing, or withdraw consent you previously gave
To exercise any of these, email gtm@eulav.io. We respond within 30 days.
Retention
We keep account data for as long as your account is active. After closure we delete or anonymise personal data within 90 days, except where we are legally required to retain records such as invoices.
Security
Data is encrypted in transit and at rest. Access is restricted to staff who need it, and we review our controls regularly. No system is perfectly secure, and if a breach affects your data we will notify you and the relevant regulator within the required timeframe.
International transfers
Your information may be processed outside your country. Where data leaves the European Economic Area we rely on Standard Contractual Clauses or another approved safeguard.
Children
Our services are for businesses and are not directed at anyone under 16. We do not knowingly collect data from children.
Changes
If we make material changes we will update the date at the top of this page and, where the change is significant, notify account holders by email.
Questions about your data?
Email us directly and a person will answer.
gtm@eulav.io
