Privacy Policy

Leavio (“we”, “us”) is an exit-survey application for Shopify merchants. We designed Leavio to be privacy-preserving by default: we do not collect personal information from shoppers.

Data we collect

• From merchants: your Shopify store domain, access token, and billing status. These are required to operate the app.
• From shoppers: the anonymous survey response (selected choice, optional free-text), the page URL where the response was given, and a timestamp. We do not collect names, email addresses, IP addresses, or device identifiers.

PII protection in free-text

Shoppers occasionally paste personal information into the optional free-text field even though we ask them not to. Before any free-text comment is stored in our database, we run an automatic scrubber that replaces likely email addresses, phone numbers, credit-card numbers, and IP addresses with bracketed markers (e.g.[email], [phone]). The scrubber is applied a second time before any text is sent to AI providers (defense in depth). Page URLs are stripped of their query string and fragment to prevent UTM or login parameters from being stored.

The scrubber is regex-based and may miss obscure formats; we treat it as a best-effort guardrail, not a guarantee. Merchants can request deletion of any specific response at any time (see “Your rights” below).

How we use data

We use merchant data only to run the app and provide dashboards. We use shopper responses only to show the merchant aggregated and individual answers inside their dashboard.

Data sharing

We do not sell data. We do not share data with third parties except for the following sub-processors that process data on our behalf:

• Supabase (US) — primary database for merchant configuration and anonymous shopper responses.
• Vercel (US) — application hosting and serverless functions.
• Resend (US) — transactional email, used only to deliver a single waitlist confirmation to people who explicitly entered their email on our launch page. Not used for any merchant-app or shopper data.
• Sentry (US) — production-only error tracking. Configured with personally identifiable information disabled (sendDefaultPii: false); only stack traces and minimal request metadata are sent.

Retention

Merchant and response data is retained while the app is installed. If you uninstall the app, we delete all associated data within 30 days, in line with Shopify’s shop/redact webhook.

Your rights (GDPR / CCPA)

Merchants can request deletion of their data at any time by emailing support@leavio.app. Shoppers can exercise rights through the merchant whose store they interacted with.

Contact

Email: support@leavio.app