Privacy Policy

1. Introduction

Revebe Digital Private Limited ("Revebe", "we", "our", or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our services, including the Revebe Digital ERP System, our website https://revebe.com, our Shopify applications, and our integrations including the WhatsApp Business Platform and the Meta and Google advertising platforms. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following categories of information:

• Personal Information — name, email address, phone number, business details, billing data and location.
• Account Information — login credentials, business profile details and configuration settings.
• Usage Data — IP address, browser type, device details, pages visited and usage logs.
• Cookies and Tracking — used to maintain your session and analyse traffic.
• Merchant Store Data — where you install one of our Shopify applications, the data described in Section 4 below. For some applications this includes shoppers' names and contact details, as that section explains.

3. WhatsApp Integration (Meta Platform)

Our services may integrate with the WhatsApp Business Platform provided by Meta Platforms Inc. When this integration is used, messages may be sent through the WhatsApp Cloud API, and phone numbers and message content may be processed through Meta infrastructure. Revebe does not access or store WhatsApp conversations beyond what is required to deliver the service, maintain message logs, or comply with legal requirements.

4. Our Shopify Applications

We publish applications on the Shopify App Store. When a merchant installs one, Shopify asks them to approve a specific set of permissions, and we receive an access token limited to those permissions. We describe below exactly what each application reads and stores.

4.1 Syncfeed (product feeds)

Syncfeed generates product feed files so a merchant's catalogue can be advertised on Google, Meta, TikTok, Snapchat and Pinterest. With the merchant's approval it reads, from their Shopify store:

• products, product variants, titles, descriptions, images and videos;
• prices, compare-at prices and currency;
• inventory quantities and stock policy;
• collections, vendors, product types, tags and barcodes;
• storefront web pixel events, where the merchant enables that feature (see Section 6).

Syncfeed does not read customer records, orders, payment details or any other personal data from a merchant's store. The permissions it requests are limited to product, inventory and pixel data, and it cannot access anything outside them.

We store: the Shopify access token, the merchant's feed configuration, and the generated feed files.

4.2 Revebe Alert for WhatsApp

Revebe Alert sends order notifications to shoppers over WhatsApp. With the merchant's approval it reads order and customer contact details from their Shopify store — including customer name, phone number and order contents — because those are required to send an order message. It stores a record of messages sent, their delivery status and any reply received, so the merchant has a log and so the service can avoid sending duplicates.

4.3 Revebe: Product Reviews & UGC

Revebe Reviews collects product reviews from a merchant's shoppers and shows them on the merchant's store. With the merchant's approval it reads the store's products and orders. Orders are used for two things only: to confirm that a reviewer bought the product (shown as "Verified buyer"), and, where the merchant turns on review request emails, to know whom to ask for a review once an order has been fulfilled.

It stores:

• reviews: the rating, title, text and any photos, the name the reviewer chose to show, whether they are a verified buyer, and the reviewer's email address if they gave one. Giving an email is optional; it is never shown on the store, and only the merchant can see it;
• for review request emails: the customer's name and email address, the order number and the products ordered;
• thank-you discount codes a merchant offers for reviews, and the email address each was sent to;
• the merchant's own email (SMTP) settings, with the password encrypted;
• a record of each time reviewers' details are viewed or downloaded by the merchant, or requested or erased by Shopify.

Customer names and email addresses are encrypted in our database. Emails to shoppers are sent from the merchant's own email account and only for these purposes: asking for a review, one reminder, a thank-you discount code, or an invitation to update a review the shopper wrote. They are never used for our own marketing. Every review request email has a one-click unsubscribe link, honoured for all future review emails from that store. A thank-you discount is the same whatever rating a review gives. We do not sell or share this data.

Retention: review request records are deleted 180 days after the email was sent; discount code records 90 days after the code expires; the access record after one year. Reviews stay while the application is installed, because they are the merchant's content. When Shopify asks us to erase a customer, their name, email address and photos are removed from their reviews, which remain as "Anonymous". When a merchant uninstalls the application, all of that store's data is deleted when Shopify sends its shop erasure request, 48 hours after the uninstall.

5. Product Feeds Are Published Deliberately

A product feed exists to be fetched by advertising platforms. Each feed is served from a web address containing a long, randomly generated token, because the platforms that read it (Google Merchant Center, Meta Commerce Manager and others) cannot log in.

This means anyone who has the feed address can read the product data in it: titles, descriptions, prices, stock levels, images and links. This is by design and is how every product feed works. The address is not published or indexed by us, and a merchant can regenerate it at any time from inside the app, which immediately makes the previous address stop working.

Feeds contain product information only. They never contain customer, order or payment data.

6. Advertising Platforms

Where a merchant configures them, our applications send data to the following third parties on that merchant's behalf and under their instruction:

• Google — Merchant Center fetches the merchant's feed file. We do not send data to Google directly and hold no Google credentials.
• Meta Platforms — where connected, we create and update a product catalogue in the merchant's own Meta Business, and may read the list of Businesses and pixels that Business owns, so the merchant can choose between them. We request only catalog_management, business_management and ads_read. We do not request or access Meta profile data, friend lists, email addresses, or any personal information about any person.
• Meta Pixel and Conversions API — where a merchant enables it, storefront activity is sent to their own Meta pixel. This may include pages viewed, products viewed, items added to cart, checkouts started and purchases completed, together with product identifiers, order value, currency and an order reference. This runs inside Shopify's sandboxed web pixel, which cannot read the page or any other application's data. Merchants choose which of these events are sent, and on which pages.
• TikTok, Snapchat and Pinterest — these platforms fetch the merchant's feed file in the same way as Google.

Each of these platforms processes that data under its own privacy policy. Merchants are responsible for disclosing their use of advertising pixels to their own customers, as required in their jurisdiction.

7. How We Use Your Information

• Provide and maintain our services
• Process transactions
• Send order confirmations and notifications
• Enable WhatsApp messaging integrations
• Generate product feeds and synchronise catalogues with advertising platforms
• Improve product functionality and analyse usage trends
• Prevent fraud and maintain security
• Comply with legal obligations

We do not use merchant store data to train models, to build profiles of individuals, or for any purpose other than delivering the service the merchant installed.

8. How We Share Information

We may share information with trusted service providers (hosting, payment processing, analytics, messaging infrastructure), with Meta Platforms when WhatsApp messaging features are used, with the advertising platforms described in Section 6 when a merchant configures them, and where required to comply with laws or protect our rights. We do not sell personal data to third parties.

9. Data Retention

We retain personal information only as long as necessary to provide services, maintain transaction records, comply with legal obligations and resolve disputes. When data is no longer required, it is securely deleted. The periods for each Shopify application are stated in Section 4.

10. Data Security

We implement safeguards including encrypted connections (HTTPS), secure server environments, controlled database access and access authentication. Access tokens are stored on our servers and are never exposed to browsers or third parties. Customer names and email addresses held by our Shopify applications are encrypted at rest, and backups are encrypted before they leave our servers. Access to our servers is limited to named administrators using key-based authentication, and is logged. However, no internet transmission is 100% secure.

11. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete or restrict processing of your personal data, withdraw consent, and request data portability. Requests can be sent to info@revebe.com.

12. Uninstalling an Application

When a merchant uninstalls one of our Shopify applications:

• the access token is revoked by Shopify and can no longer be used;
• feed addresses stop serving immediately, and the advertising platforms fetching them receive an error;
• any storefront pixel installed by the app is removed;
• review request emails that have not been sent yet are cancelled;
• stored store data is deleted in line with Shopify's mandatory data-deletion requests.

We support Shopify's required privacy webhooks — customer data requests, customer redaction and shop redaction — and act on them within the periods Shopify requires. Catalogues previously created in a merchant's own Meta Business are not deleted, because they belong to the merchant and removing them could disrupt advertising they still rely on; a merchant can delete them at any time in Meta Commerce Manager.

13. Data Deletion Requests

Users may request deletion of their personal data by emailing info@revebe.com with their account email, business name and reason for the request. Upon verification, data will be deleted within 7 business days, unless retention is required by law. Instructions are also published in our Data Deletion Policy.

14. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from minors.

15. International Data Transfers

Our services may process data in countries where our infrastructure or partners operate. We ensure reasonable safeguards for international data transfers.

16. Third-Party Services

Our services may contain links to third-party services including Meta / Facebook, the WhatsApp Business Platform, Google, TikTok, Snapchat, Pinterest, Shopify, payment gateways and analytics providers. These third parties have their own privacy policies.

17. Changes to This Policy

We may update this policy periodically. Updates will be published on https://revebe.com/privacy.php

18. Contact Information

Revebe Digital Private Limited
18, Umar Commercial, Bahria Town, Lahore, Punjab 53720, Pakistan
Email: info@revebe.com
Phone: +92 328 3281111 · +92 328 3282222
Website: https://revebe.com