Privacy Policy

Last updated: April 3, 2026

This Privacy Policy explains how Collect (“we,” “our,” or “us”), operated by Bluvera Platform LLC, collects, uses, and protects information when you use our Shopify application. We are committed to protecting your privacy and handling your data responsibly.

1. What Data We Collect

When you install and use Collect, we collect the following data:

  • Store information: Your Shopify store name, domain, owner email, and store locale settings. This is required for app installation and communication.
  • Order data: Order IDs, order amounts, payment status, creation dates, and fulfillment status for orders that use manual payment methods. We do not collect order line-item details unless required for invoice display.
  • Customer contact information: Customer email addresses associated with unpaid orders. This is used exclusively for sending payment reminder emails on your behalf.
  • App usage data: Reminder send logs, open/click tracking, recovery status, and feature usage analytics.

2. How We Use Your Data

We use the data we collect to:

  • Track unpaid orders and draft orders on your behalf based on your configured rules.
  • Send automated payment reminder email sequences to customers with outstanding balances.
  • Provide a customer-facing invoice center where buyers can view and pay their outstanding invoices.
  • Generate recovery analytics, dashboards, and reports to help you understand your payment recovery performance.
  • Improve the Collect application based on aggregated, anonymized usage patterns.

3. Third-Party Services

Collect relies on the following third-party services to operate:

  • Resend: We use Resend as our transactional email provider to deliver payment reminder emails on your behalf. Customer email addresses are shared with Resend solely for email delivery.
  • PostgreSQL database hosting: Order tracking data, reminder logs, and store settings are stored in a managed PostgreSQL database with encryption at rest.
  • Shopify: We interact with the Shopify GraphQL Admin API to read order and draft order data, and to register webhooks for real-time updates.

4. Data Retention

  • When you uninstall Collect, all of your store's data — including tracked orders, reminder logs, settings, and customer email addresses — is permanently deleted from our systems within 48 hours.
  • You may request full deletion of your data at any time by contacting us at hi@bluveraplatform.com. We will process your request within 30 days.
  • Aggregated, anonymized analytics data (which cannot be linked back to any individual store or customer) may be retained for product improvement purposes.

5. GDPR Compliance

Collect fully supports Shopify's mandatory GDPR webhooks:

  • customers/redact: When a customer requests data erasure, we remove all stored information associated with that customer, including email addresses and order tracking records.
  • shop/redact: When a store owner requests full shop data erasure (typically after uninstall), we delete all data associated with that store.
  • customers/data_request: When a customer requests their data, we compile and provide all stored information associated with that customer.

6. Data Security

We take the security of your data seriously and implement the following measures:

  • All data is transmitted over HTTPS with TLS 1.2 or higher. No unencrypted connections are accepted.
  • We never log personally identifiable information (PII) such as customer email addresses, names, or payment details in our application logs.
  • Shopify API tokens and session credentials are stored encrypted and are never exposed in client-side code or logs.
  • Database access is restricted to the application layer with role-based access controls. Direct database access is not available externally.
  • Webhook payloads are verified using HMAC signatures to prevent tampering and unauthorized requests.

7. Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of all data we store about your shop and your customers.
  • Correction: Request correction of any inaccurate data we hold.
  • Deletion: Request full deletion of all your data at any time, regardless of whether you continue to use the application.

To exercise any of these rights, contact us at hi@bluveraplatform.com.

8. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: