Privacy policy

For merchants' own account data, Nayvo is the controller.

For data about a store's shoppers (for example ratings and feedback they leave), the merchant is the controller and Nayvo processes that data on the merchant's behalf, only to provide the App's features to that merchant.

• Store details from Salla: store id, store name, domain and the store owner's email, and the access tokens Salla issues so the App can work with your store.
• Your settings in the App: widgets, design, review request and email settings, language.
• If you use Sign in with Google: your Google account email and the OAuth tokens Google issues, and the Business Profile locations you choose to connect.
• Businesses you add, and their public Google reviews (reviewer name and photo, rating, text, photos, date, and the business's replies).
• Messages you send to support through the App, with the reply-to email you give.

• Ratings and private feedback a shopper gives in the review request on the order confirmation or order page, or from a review request email, with the order number and the name and email that Salla shares for that order.
• For review request emails: the order number, the customer's name and email (from Salla's order notification), the email's status, and whether the customer rated from it.
• Unsubscribes from review request emails (the email address and the store).
• Technical data needed to serve and protect the widgets, such as IP addresses in short-lived server logs and rate limits.

Only on stores where the merchant turned these features on:

• To show a store's Google reviews on its storefront, and to let the merchant reply to them and manage how they appear.
• To ask shoppers for a review after an order (on the store and by email, if the merchant turned this on) and to show their feedback to that merchant.
• To create AI summaries and translations of public reviews and AI-drafted replies, when the merchant turns these on.
• To provide support, keep the App secure, prevent abuse, and fix problems.

We don't sell personal data, and we don't use it for advertising.

With Sign in with Google, the App asks for access to your Google Business Profile (the business.manage permission) and your basic profile (name and email). We use this access only to list the locations you manage, read their reviews and post, edit or delete your replies when you ask the App to. We don't use Google user data for anything else, don't sell it, and don't use it to develop or train AI models.

Nayvo Google Reviews' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can disconnect at any time from the App (Home → Google account → Sign out), which revokes our access with Google, or from your Google account's security settings.

• Salla: the platform the App runs on.
• Railway: hosting and database. Servers may be located outside your country, including in the United States.
• Google: Places API and Business Profile APIs, to fetch business details and reviews and post replies.
• Resend: sending review request emails, support messages and service alerts.
• Anthropic: AI summaries, translations and reply drafts. Only review text and business details are sent, never shoppers' contact details. Under Anthropic's commercial terms, data sent through its API isn't used to train its models.

We share data only with providers that help us run the App, under their data-protection terms:

• Salla and Google access tokens: until you sign out or uninstall the App; they're deleted then.
• Store settings, businesses and reviews: while the App is installed, and afterwards so a reinstall picks up where you left off, unless you ask us to delete them.
• Reviews deleted on Google are removed at the next full sync. AI summaries and translations are replaced when reviews change.
• Shopper feedback, review request records and unsubscribes: kept for the merchant until the merchant asks us to delete them. Unsubscribes are kept so we keep respecting them.
• Support messages: kept as support history.

Merchants can change settings, disconnect Google or uninstall the App at any time, and can ask us to export or delete their data at subham@nayvo.eu. We reply within 30 days.

Shoppers can unsubscribe from review request emails with the link in every email. For other requests about a store's data (access, correction, deletion), contact the store; we help merchants handle these requests. You can also write to us directly.

Depending on where you live (for example under the EU GDPR or Saudi Arabia's Personal Data Protection Law), you may have further rights, including to object to processing or complain to a data protection authority.

The App's dashboard uses one short-lived cookie during Sign in with Google, to tie the sign-in to your browser. On storefronts, widgets save small preferences in the shopper's browser (for example that a floating widget was closed, or that a review request was already answered). We don't use advertising or tracking cookies.

Data is encrypted in transit (HTTPS). Access to systems is limited, Salla webhooks are signature-checked, links in emails are signed, and public endpoints are rate-limited. No system is perfectly secure; if a breach affects your data, we'll tell you and the relevant authorities as the law requires.

The App is for businesses and isn't directed at children.

We'll update this page when our practices change and change the date above. For significant changes, we'll notify merchants in the App or by email.

Nayvo, subham@nayvo.eu.