Privacy Policy
This policy explains what StoreVera collects, why, and what you can do about it.
1. What we collect
- Contact details you type at checkout: name, email address, phone number (optional).
- Order details: package selected, amount, currency, order reference, status, and the timestamp and hashed IP recorded when you ticked the consent box.
- Store details you submit on the onboarding form: Shopify store URL, collaborator code, business name, product category, style preference, and your notes.
- Payment records: Stripe identifiers, amount, currency, and outcome. We never receive or store your full card number, expiry, or CVC. Those go to Stripe directly from your browser on Stripe's own page.
- Technical data: a session cookie, and a salted hash of your IP address used only for rate limiting. We do not store your IP in the clear.
2. Why we collect it
To take your order, do the work you paid for, contact you about it, meet our tax and accounting duties, and defend against fraud and chargebacks. That is the complete list. We do not build advertising profiles.
3. Do we sell your information?
No. We do not sell, rent, or trade personal information, and we do not share it for cross-context behavioural advertising.
4. Who we share it with
- Stripe — payment processing. Stripe is an independent controller of your payment data under its own privacy policy.
- Shopify — when you grant us collaborator access on your store, that relationship is governed by Shopify's terms and privacy policy, not ours.
- Our hosting and email providers — as processors, under contract, only to run the service.
- Authorities — where we are legally required to.
5. Cookies and analytics
We set one strictly necessary cookie (sv_session) that keeps your session and carries the CSRF token. It is HttpOnly, SameSite=Lax, Secure over HTTPS, and expires when you close the browser. We do not run third-party analytics, advertising pixels, or trackers on this site. If that ever changes, this section changes first and we will ask for consent where required.
6. How long we keep it
Order and payment records: 7 years, because tax and chargeback rules require it. Onboarding submissions: for the life of the order plus the revision window. Rate-limit hashes: 24 hours. Ask us to delete something and we will, unless we are legally required to keep it — in which case we will tell you which rule applies.
7. Security
We use HTTPS, hashed session tokens, prepared statements, restricted database access, and we keep secrets in the server environment rather than in code. No system is perfectly secure and we will not claim ours is. If we discover a breach affecting your data, we will tell you and any regulator we are required to notify.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, to object to it, and to complain to your data protection authority. Exercise any of these by emailing storevera@support.com or calling +1 (786) 494-3069. We will respond within the time your law requires, and we will not treat you worse for asking.
9. International transfers
Our providers, including Stripe, may process data outside your country, including in the United States. Where required we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
10. Children
This is a service for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data.
11. Contact
KRAEV LLC
1850 S Ocean Dr, Apt 3508, Hallandale Beach, FL 33009, United States
+1 (786) 494-3069 · storevera@support.com
Hours: Monday–Sunday, 9:00 AM–10:00 PM ET