PRIVACY & DATA PROTECTION | GDPR COMPLIANT
Privacy Policy & GDPR Data Protection
Effective Date: October 20, 2026 • EU GDPR, UK GDPR, CCPA, Stripe App Marketplace & Shopify App Store Compliant
1. Data Roles & Minimal Data Collection
| Category | How Your Data Is Handled |
|---|---|
| Data Controller | You (the subscribing Stripe or Shopify B2B merchant) retain 100% ownership of your customer data |
| Data Processor | RevClamp Enterprise processes usage and billing metadata strictly to prevent revenue loss and prepare tax/dispute proof |
| Data Processed | Stripe customer ID, business email, feature action name, timestamp, and B2B EU VAT number |
| Cookieless EU Privacy | Works without browser cookies, ad trackers, or device fingerprinting |
2. Automatic 90-Day Data Expiration & Instant Deletion
| Privacy Control | Protection Guarantee |
|---|---|
| Automatic 90-Day Rolling Deletion | Usage activity logs are kept for 90 days to support chargeback evidence and are then automatically purged |
| Tenant Isolation | Every merchant workspace is strictly isolated with dedicated API keys and encrypted webhook signatures |
| Automated GDPR Erasure Webhooks | Instantly honors customers/data_request, customers/redact, and shop/redact requests |
| Privacy Contact & DPO | Data access or deletion requests are handled within 24 hours at privacy@revclamp.com |
3. Official Integrations & Sub-Processors
| Service | Purpose | Region |
|---|---|---|
| Stripe, Inc. | Subscription status verification & dispute draft staging | US / EU |
| Shopify Inc. | Wholesale B2B order & GDPR webhook processing | US / EU |
| European Commission VIES | Official EU cross-border VAT number verification | European Union |