Legal documentation

Privacy Policy

Last updated: October 24, 2023. Our commitment to protecting your enterprise data and Shopify store operations through secure AI processing.

This Privacy Policy describes how Ourava ("we", "us", or "our") collects, uses, and shares your personal information when you use our Shopify application and related services. By using the Ourava platform, you agree to the practices described in this policy.

Information Collection

To provide our specialized SaaS services, we collect several types of information from and about users of our App, including:

  • Account Information: Name, email address, and Shopify store URL.
  • Shopify Store Data: Product listings, order history, and customer metadata necessary for AI analysis.
  • Usage Data: Information on how you interact with the Ourava dashboard, including timestamps and feature utilization.
  • Technical Data: IP addresses, browser types, and device identifiers used to access our platform.

Data Usage & AI Processing

Our primary goal is to enhance your Shopify store's performance through advanced intelligence. We use your data to:

neurology

AI Training

We utilize anonymized store patterns to refine our predictive models, ensuring they remain state-of-the-art.

analytics

Insights

Generating personalized recommendations for inventory management and customer segmentation.

Important: Ourava does not sell your store data to third-party advertisers. All AI processing is performed within our secure infrastructure.

Data Security and Storage

We employ enterprise-grade security measures to protect your information:

  • Encryption: All data is encrypted at rest using AES-256 and in transit via TLS 1.3 protocols.
  • Access Controls: Strict internal identity management ensures only authorized personnel can access infrastructure.
  • Monitoring: 24/7 system monitoring and regular third-party security audits.

Third-Party Services

Ourava integrates with various third-party services to function effectively:

  • Shopify: As our primary platform integration partner.
  • Cloud Infrastructure: Secure hosting provided by AWS and Google Cloud Platform.
  • Payment Processors: We use Stripe for all billing operations; no credit card data is stored on our servers.

Compliance (GDPR/CCPA)

We are committed to global data protection standards:

GDPR Rights

European users have the right to access, rectify, or erase their personal data. We provide self-service tools within the dashboard to manage these requests.

CCPA Compliance

California residents may request disclosure of the specific pieces of personal information we have collected and have the right to opt-out of data processing.