Legal
Privacy Policy
Last updated · {{TODO: real updated date}}
{{TODO: legal review required — do not publish without lawyer sign-off}}
This document is a structural placeholder. Real privacy policy copy must be reviewed and approved by qualified legal counsel before this page goes live on a public domain.
Overview
Cervito (“we”, “us”, “our”) operates an AI shopping assistant for Shopify merchants. This Privacy Policy explains what data we collect, how we use it, and what rights you and your visitors have.
Data we collect
{{TODO: enumerate every data type collected — visitor session IDs, conversation transcripts, merchant credentials, etc.}}How we use data
{{TODO: enumerate every use case — improving recommendations, training models, billing, support, etc.}}Sub-processors
A current list of sub-processors is published at /legal/dpa.
Data residency
{{TODO: confirm Railway region + sub-processor regions, document}}Retention
Conversation data is retained for 90 days by default. Merchants can adjust this through Settings down to 30 days. Aggregate analytics (intent counts, conversion lift) are retained indefinitely in anonymized form.
Your rights
You have rights under GDPR, UK GDPR, and CCPA to access, correct, and
delete your data. Email [email protected] with your company name and
Shopify domain to file a request.
Contact
Privacy questions: [email protected].