Reval Privacy Policy

1. Who This Applies To

• Merchants: owners and operators of Shopify stores who install Reval.
• Subscribers: end customers of those stores who purchase a subscription. Regarding their data, the merchant is the data controller and Reval acts as the data processor (we process their data on behalf of the merchant).

2. What Data We Process

From merchants: name, contact email, Shopify store domain and settings, linked Mercado Pago account data (identifiers, never bank credentials), support history.

From subscribers (on behalf of the merchant): name, email, phone number, shipping address, subscription products and frequency, billing history and status (approved, declined, retrying), Shopify order identifiers and Mercado Pago payment identifiers.

Payment data: card tokenization occurs in the subscriber's browser directly with Mercado Pago. Reval's servers never view or store the full card number. We only store the recurring billing authorization identifier (preapproval) issued by Mercado Pago.

3. What We Use Data For

We do not sell personal data or use it for third-party advertising.

• Operating subscriptions: creating billing mandates, executing recurring charges, creating orders in Shopify, retrying failed charges.
• Providing merchant support, including messaging channels (WhatsApp, Slack) where inquiries may be handled by an automated AI assistant supervised by humans. Support conversations are processed and stored to resolve cases and improve the service.
• Sending operational notifications: successful charges, failed charges, self-service portal links.
• Detecting and preventing errors, fraud and misuse.

4. Who We Share Data With

Only with the service providers required to operate the service:

• Shopify (orders and store data) — according to their own privacy policy.
• Mercado Pago (payment processing and billing mandates).
• Meta / WhatsApp Business Platform (support messaging, if the merchant uses this channel).
• Infrastructure and AI model providers, for hosting the application and the support assistant, as well as model providers accessed through their gateway, under agreements that limit data usage strictly to service delivery.

5. Where and How Long Data Is Retained

We may share data if required by law or a competent authority.

Data is hosted on cloud infrastructure that may be located outside your country (primarily in the United States). We retain data for as long as the store has Reval installed and for the subsequent period needed for legal, accounting and dispute resolution obligations. Upon uninstalling the app, data is deleted in accordance with Shopify's mandatory timelines and webhooks.

6. Your Rights

Depending on your jurisdiction (including LGPD in Brazil and Law 25,326 on Personal Data Protection in Argentina), you may request access, rectification, update or deletion of your personal data by writing to [privacy contact email]. If you are a subscriber of a store, you may also exercise these rights directly with the corresponding merchant.

7. Security

We apply reasonable technical and organizational measures: encryption in transit, credentials managed via secrets services, principle of least privilege, and mandatory human approval for sensitive operations (e.g. refunds).

8. Changes to This Policy

We will post any changes on this page and update the header date. Substantial changes will be communicated to merchants via email.

9. Contact

LATDEV LLC — 1000th South Pointe Dr, St. Petersburg, FL 33139

Email: jcbonina@latechfactory.com