Privacy Policy

Revy Auto Split Orders

Effective date: 2026 September 24 | Last updated: 2026 September 24

This Privacy Policy explains how we process personal data in connection with Revy Auto Split Orders (the App), including its embedded Shopify interface, support services and public policy pages. It applies to merchants, their staff and, where relevant, their customers.

1 Who we are

The App is provided by UAB Revonia, trading as Revy Apps (we, us or the Provider), registered in Lithuania, company number 304978073, with its registered address in Vilnius, Lithuania.

Privacy contact: info@revyapps.com
Privacy Policy: https://www.xantho.lt/revy-privacy-policy

2 Our roles

For customer and order data processed to carry out a merchant’s splits, and staff data used to authenticate access on the merchant’s behalf, the merchant is normally the controller and we are its processor. We process that data under the merchant’s documented instructions and our Data Processing Addendum (DPA).

We act as an independent controller for merchant business contacts, subscription administration, support correspondence and records we need for our own legal compliance, security and legal claims. This does not authorise us to reuse customer order data for our own advertising or other unrelated purposes.

Shopify’s role is governed by its own agreements with the merchant. Shopify acts as a processor for certain merchant customer-data processing and as a controller for specified other processing. Shopify is not appointed as our subprocessor merely because the App uses its platform or APIs.

3 Data we process and where it comes from

We receive data from Shopify when a merchant installs or uses the App, from the merchant’s configuration and instructions, and from people who contact support. Access depends on the permissions granted to the App and the features used.

• Merchant and staff data: shop domain and contact email; subscription plan and status; split rules and settings; staff identifiers, name and email where provided by Shopify for authentication; and support messages and attachments supplied to us.
• Authentication data: Shopify access tokens and session information used to authenticate the shop or staff member and make authorised API calls. These are treated as confidential credentials.
• Customer and order data: customer identifiers, names, email addresses and phone numbers; shipping and billing addresses; order identifiers and names; line items, quantities, prices, taxes, discounts, notes and tags; fulfillment location identifiers; and B2B company or purchasing-entity details where relevant to draft-order splits.
• Operational data: split-job status, child-order identifiers, order snapshots needed for history and reverting splits, access and action logs, timestamps, and queue records such as shop domain, order identifier and order name. Compliance webhook payloads may include customer contact details, customer and order identifiers, and request identifiers supplied by Shopify.

We do not request or collect payment card numbers, CVV codes or bank account numbers through the App. We may process payment status to reproduce the original order’s bookkeeping status. This is not a new customer charge.

Order notes, tags and support attachments may contain personal information entered by merchants or customers. Please do not provide unnecessary sensitive information. The App does not require special-category personal data to perform order splits.

4 Purposes and legal bases

On the merchant’s behalf, we use data to create child orders, including through draft orders where enabled; edit the parent order; split or reroute fulfillments; display split history; support reverting splits; authenticate authorised staff; and assist with privacy requests. The merchant is responsible for the lawful basis for this processing and for informing its customers and staff. Our authority to process as a processor comes from the merchant’s documented instructions and the DPA.

As a controller, we process merchant and business-contact data for these purposes:

• To provide and administer subscriptions, enforce plan limits and answer support requests: performance of our contract where the individual is a contracting party; otherwise our legitimate interests in providing the service and managing business relationships.
• To secure the App, investigate misuse and establish or defend legal claims: our legitimate interests in protecting the service, users and our legal rights, subject to the individual’s rights and interests.
• To meet accounting, tax or other legal requirements: compliance with the applicable legal obligation.

Where contact or authentication data is necessary to provide the service or respond to a request, not providing it may prevent us from doing so. We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects on individuals. Automated order splitting carries out the merchant’s configured instructions.

We do not sell personal data or use customer data for advertising, profiling or remarketing. We do not use merchant or customer data to train public artificial-intelligence models. The App is not used to send customer marketing emails. Shopify or other merchant-installed services may send messages according to their own settings and workflows.

5 Who receives data

We disclose data to Shopify to carry out authorised order and fulfillment actions, to the merchant and its authorised staff, and to service providers that help us host and operate the App or handle support. Providers processing customer data on our behalf are subject to appropriate data-protection obligations.

Our hosting provider is Render. Its services include the web application, background workers, queue service and PostgreSQL database. The provider’s legal entity, relevant processing countries and any additional subprocessors are identified in Schedule 3 of the DPA.

Merchant business-contact and support records are also handled by Namecheap email provider. Where such providers receive customer personal data on our behalf, they are also included in Schedule 3.

We may disclose information to professional advisers where necessary for advice or legal claims, or to courts, regulators or public authorities where legally required. We limit disclosure to what is necessary and lawful.

6 International transfers

The App’s web application, background worker, Redis queue and PostgreSQL database are hosted through Render. Render’s listed entity and infrastructure-subprocessor countries are the United States. The actual Render service region may depend on the region configured for a particular service. Data may also be accessed from the countries listed in Schedule 3 of the DPA, including for provider support or operations.

Where a transfer requires safeguards, we use an applicable adequacy decision or another lawful mechanism, such as the European Commission’s Standard Contractual Clauses (SCCs) with the correct module and completed details. UK and Swiss requirements are addressed where applicable. The mechanism for each relevant provider is recorded in Schedule 3.

We assess transfers and apply supplementary safeguards where required. You may request information about the applicable safeguards or a copy through info@revyapps.com, with redactions where necessary to protect confidential information without preventing an understanding of the safeguards.

7 How long we keep data

We retain personal data only as long as necessary for the relevant purpose or an applicable legal requirement.

• Shop/redact: the App deletes the shop’s PostgreSQL records, including rules, jobs, snapshots, access logs, GDPR request rows, the store row and Shopify sessions. Orders held independently in Shopify are not deleted by the App. Redis queue messages for the shop are not currently cleared by the shop/redact handler and may remain until processed, expire or are otherwise removed.
• Customers/redact: the App does not delete the customer’s split jobs. It overwrites the name, email, phone and address fields in every split snapshot for that shop with [redacted]. The customers/redact webhook payload is stored in a GdprRequest record and is not currently stripped.
• Access and action logs: up to 90 days, unless removed earlier through shop/redact or another valid deletion process.
• Authentication credentials: Shopify sessions are deleted through shop/redact; access tokens are invalidated or removed when access ends or is revoked.
• Redis queue messages are removed when processed. They have no expiry. They can remain until the worker consumes them or the Redis instance is deleted.
• GdprRequest records are kept while the app is installed and deleted on shop/redact. They can include the original webhook payload (customer or request ids) and are not stripped by customers/redact.
• Merchant billing, business-contact and support records: retained for the business relationship and as necessary afterwards for applicable accounting or tax obligations, unresolved support matters and legal claims. Retention is assessed by purpose, legal requirements and relevant limitation periods.

Deleted PostgreSQL data may remain in provider backups until the backup retention period expires. The maximum backup retention period is 7 days. Backup data is not used for ordinary operations; if restored for recovery, the applicable deletion process is reapplied. Orders held independently in Shopify remain subject to the merchant’s and Shopify’s retention arrangements.

8 Third party services

We may share certain non-identifying information with trusted third parties to help us provide and improve our services. These include, but are not limited to:

• Meta’s Ads, Meta’s Pixel: For advertising, remarketing, and audience targeting.

You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/516147308587266

To opt-out from Facebook’s interest-based ads, follow these instructions from Facebook: https://www.facebook.com/help/568137493302217

For more information on the privacy practices of Facebook, please visit Facebook’s Data Policy: https://www.facebook.com/privacy/explanation

• Google Ads — Google Ads (AdWords) remarketing and advertising service is provided by Google Inc. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: https://www.google.com/settings/ads
• Google Analytics: For analyzing usage patterns, traffic sources, and user engagement. Privacy Policy: https://policies.google.com/privacy
• Other analytics and advertising platforms: To better understand our users and deliver relevant offers.
• Mantle: For analyzing usage patterns, traffic sources, and user engagement. Privacy Policy can be viewed at https://heymantle.com/privacy

9 Security

We use technical and organisational measures appropriate to the risks, including TLS for data in transit, encryption at rest on the database host, encrypted provider backups, access limited to authorised personnel, access logging, and credentials stored in hosting configuration rather than source control. Our contractual security commitments are described in Schedule 2 of the DPA.

No service can guarantee absolute security. Suspected incidents can be reported to info@revyapps.com. Where a breach affects personal data processed for a merchant, we notify that merchant without undue delay after becoming aware and provide information and assistance required by applicable law.

10 Authentication and cookies

The embedded App uses Shopify authentication and session tokens for access within Shopify admin. Our public Privacy Policy and DPA pages do not use advertising or analytics cookies. Shopify’s own cookies and similar technologies are governed by its policies. If we introduce additional non-essential technologies, we will update the relevant notice and obtain consent where required.

11 Privacy rights and requests

Where we act as controller, applicable law may give you rights to access, correct, erase or receive a portable copy of your personal data, restrict processing, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights are subject to applicable conditions and exceptions.

Contact info@revyapps.com. We may request proportionate information to verify identity and will respond within the applicable legal period. You may complain to the supervisory authority where you live or work or where an alleged infringement occurred. Our establishment’s supervisory authority is the State Data Protection Inspectorate of Lithuania (https://vdai.lrv.lt/en/).

For customer data processed for a merchant, contact the store from which you purchased. We assist that merchant and forward requests we receive directly, unless legally prohibited.

Shopify compliance webhooks are received and recorded by the App. The current implementation handles them as follows: customers/data_request stores the request for processing; customers/redact anonymises the name, email, phone and address fields in every split snapshot for the shop but does not delete the related jobs and does not strip the stored GdprRequest payload; and shop/redact deletes the shop’s PostgreSQL records but does not currently clear Redis queue messages. Shopify orders remain in Shopify. Merchants may contact info@revyapps.com for assistance with a request.

Where California law applies to our processing on behalf of a merchant, we act as a service provider or contractor as applicable and follow the restrictions in the DPA. We do not sell or share that personal information as those terms are defined in the CCPA, as amended by the CPRA.

12 Children

The App is intended for merchants and their authorised staff, not for use by children. Customer records provided by merchants may nevertheless concern minors. We process those records only under the merchant’s lawful instructions; merchants are responsible for any notices or permissions required for their customers.

13 Changes and contact

We update the date above when this policy changes. For material changes, we provide appropriate notice, such as an email or a prominent in-App notice, before they take effect where required. The DPA governs changes to subprocessor appointments and contractual processing instructions.

Questions and privacy requests: info@revyapps.com.