Optivo Privacy Policy
Last updated 17 September 2026 ยท Applies to the Optivo app for Shopify, operated by Agent Wise X.
Who we are
Optivo is a Shopify app that adds storefront and marketing tools (product reviews, badges, upsells, pop-ups, email campaigns, order tracking, visitor recordings and more) to a merchant's online store. For the personal data described below, the merchant who installs Optivo is the data controller and Optivo acts as the merchant's data processor. Merchants remain responsible for the notices and consents they give their own customers.
What we collect from merchants
- The store domain, the Shopify access token Shopify issues to the app, the permissions granted and the app configuration the merchant saves.
- Courier and Instagram credentials the merchant connects, stored encrypted (AES-256-GCM) and never shown again in full.
- The merchant's plan and subscription status, read from Shopify.
What we process about a store's customers
| Feature | Data | Purpose |
|---|---|---|
| Product reviews | Name, email, review text, rating, uploaded photos/videos, order reference | Display reviews the customer chose to publish; mark verified purchases. |
| Review requests | Email, name, product bought, fulfilment date | Send one "please review" email per product after delivery. Every email carries an unsubscribe link. |
| Pop-ups, Spin the Wheel, Email Marketing | Email and/or phone, the consent text shown, the discount code issued, capture IP (rate-limiting only) | Only addresses that ticked the consent box receive campaigns; every campaign carries an unsubscribe link and List-Unsubscribe headers. |
| Loyalty & store credit | Shopify customer id, email, order and refund amounts | Award points and issue store credit in Shopify. |
| Order tracking | Order number, customer name, phone, email, delivery address as shown by the courier | Let the customer look up their delivery and receive stage notifications. |
| Visitor recordings | Page structure, mouse movement, clicks, scrolling, device size. Never keystrokes, form values, IP addresses or account pages. | Session replay for the merchant. Recording starts only after Shopify's Customer Privacy API reports that analytics processing is allowed for the visitor, and never when Do Not Track is on. |
| Community gallery | Name, social handle, caption, photos the customer submitted | Display customer photos the merchant approved. |
Sub-processors
- Shopify - hosts the store and delivers webhooks and API data.
- Resend - sends transactional and marketing email on the merchant's behalf (recipient address, subject and body).
- Meta (Instagram Graph API) - only when a merchant connects an Instagram account; public media and the connected account's id.
- YouTube / Vimeo - video thumbnails for the Product Video Gallery (no customer data).
- Exchange-rate providers (open.er-api.com, frankfurter.app) - currency rates only (no customer data).
Data is stored on servers operated by Agent Wise X in the European Union (Hetzner) and is encrypted in transit (TLS). Access is limited to the people who operate the app.
How long we keep data
| Data | Retention |
|---|---|
| Reviews and gallery photos | Until the merchant deletes them or uninstalls the app. |
| Review-request records | 90 days after the email is sent; unsendable requests 180 days. |
| Campaign send logs | 180 days. |
| Subscribers | While subscribed; 90 days after unsubscribing; captures without consent 30 days; capture IP 30 days. |
| Tracked orders | Personal fields removed 180 days after delivery; the row deleted after 365 days. Notification logs 180 days. |
| Visitor recordings | At most 30 days (merchant-configurable, shorter by default), with a storage cap per store. |
| Data-request exports | 90 days after the merchant marks them delivered. |
| Everything for a store | Erased when Shopify sends the shop/redact request, 48 hours after the app is uninstalled. |
Customer rights (GDPR, CCPA and similar laws)
Optivo implements Shopify's mandatory privacy webhooks. When a customer asks a merchant for their data, Optivo compiles everything it holds about that customer into an export the merchant can download and deliver. When a customer asks for erasure, Optivo deletes or anonymises the customer's reviews, review requests, subscriber records, send logs, loyalty and refund records, tracked orders, notification logs and gallery photos. Customers should direct requests to the merchant they bought from.
Cookies and local storage
On storefronts Optivo uses browser storage only for the features the merchant enabled: caching the merchant's settings, remembering that a pop-up was dismissed, and - only after consent - an anonymous visitor identifier for session recordings. It sets no advertising or cross-site cookies.
Related documents
The Terms of Service cover using the app and billing. The Data Processing Agreement sets out our role as your data processor, the security we apply and the sub-processors we use.
Changes and contact
We will update this page when the app's data handling changes. Questions or requests: reviews@agentwisex.com.