Privacy Policy

Last updated: August 5, 2026

Custivo ("Custivo", "we", "us") provides 3D product visualization, augmented reality, virtual try-on and product customization tools that merchants embed into their online stores. This policy explains what personal data we process, why, and the choices you have. It covers our website (custivo.com), the merchant panel, and the Custivo apps for e-commerce platforms such as Shopify and ikas.

Data we process for merchants

• Account data — name, email address, company details and login credentials (or the identity provided by Google, Microsoft, Shopify or ikas sign-in).
• Store connection data — your store domain and the platform access tokens required to operate the integration. Tokens are used solely to provide the service.
• Billing data — subscription plan, invoices and payment status. Card details are processed by our payment providers (iyzico, Shopify Billing) and never stored on our servers.
• Content — 3D models, images and scene configurations you upload or create.

Data we process about store visitors

When a merchant embeds Custivo in their storefront, we process a minimal set of interaction data so the merchant can see how the experience performs:

• Anonymous usage events (viewer opened, add-to-cart clicked) keyed by a random session identifier, together with coarse technical context (device type, browser, country derived from IP).
• Order data from connected stores — order identifier, totals, currency, line items and cart/line-item attributes, used only to count orders and revenue attributable to Custivo experiences for that merchant. We do not request or store shopper names, email addresses, phone numbers or postal addresses from order data.
• Designs a shopper creates in the customization tool (images and text they choose to place on a product), stored so the merchant can produce the ordered item.
• Camera images used by virtual try-on are processed on the shopper's device and are not uploaded to our servers.

Checkout events collected through the Shopify Web Pixel run inside Shopify's consent-aware pixel sandbox, which applies the shopper's cookie and tracking consent decisions automatically.

Purposes and legal bases

We process this data to provide and operate the service (performance of contract), to show merchants analytics about their own stores (legitimate interest), to bill subscriptions (performance of contract, legal obligations) and to secure the service (legitimate interest). We use personal data only for these purposes — we do not sell personal data and we do not use it for advertising.

Retention and deletion

• Merchant account data and content are kept for as long as the account is active.
• Order and analytics records are kept while the merchant uses the service so that historical reports stay accurate.
• When a store uninstalls the app, its platform tokens are invalidated immediately. Upon a platform redaction request (e.g. Shopify's shop/redact or customers/redact webhooks) the related data is deleted within 30 days.
• Operational logs expire automatically within 30 days.

Sharing

We share data only with the processors needed to run the service: infrastructure and hosting providers, the e-commerce platform the merchant connects (Shopify, ikas), payment providers (iyzico, Shopify Billing) and our transactional email provider. Each processor handles data under its own data processing terms. We may disclose data when required by law.

Security

All traffic between shoppers, merchants, storefronts and our services is encrypted in transit (TLS). Access to production systems and personal data is limited to authorized personnel. Webhooks are cryptographically verified before processing.

Your rights

Depending on your location (including under GDPR and KVKK), you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Merchants can exercise these rights from the panel or by contacting us; store visitors should contact the merchant they shopped with, and we support the merchant and platform (e.g. Shopify's customer data request and redaction webhooks) in fulfilling such requests.

Cookies

Our website and panel use cookies and similar technologies that are necessary for the service (authentication, preferences) and basic analytics for our own site. The embedded storefront widget does not set advertising cookies.

Contact

Data controller: Custivo. For any privacy question or request, contact us at hello@custivo.com. We may update this policy from time to time; material changes will be announced on this page.