Privacy Policy

This policy explains what information VEWO LLC (“VEWO”, “we”, “us”) collects, why, who we share it with, and the choices you have. It covers our website (vewo.ai), our client portal (app.vewo.ai and its subdomains), and the services we provide to clients.

Two roles we play

For our own website and accounts, VEWO decides how information is used. This policy applies directly.

For data from a client's business (for example, their store, ad account or email platform), we process it on the client's behalf and under their instructions, as a “processor” or “service provider”. Our Data Processing Addendum governs that data. If you are a customer of one of our clients, the client's own privacy policy explains how they use your information.

Information we collect

Information you give us

• Forms on our website, such as the free report request: name, email, website, e-commerce platform and revenue range. Submissions arrive in our inbox as individual emails. We don't add them to a mailing list or marketing database today.
• Intake forms: business details, brand voice, products, competitors, priorities and similar information about your business.
• Portal accounts: name, work email, role and the organization you belong to. We sign you in with emailed links, so we don't store passwords.
• Brand files you send us: logos, fonts, photos and product information.
• Messages you send to us by email or through the portal, including feedback on reports and creative.

Information from accounts you connect

When a client connects a business account, we receive only what that connection allows and what the service needs:

• Shopify: products, collections, blog content, files and metafields, and order line items and totals used to find top-selling products. We do not request customer names, email addresses, phone numbers or addresses.
• Meta (Facebook and Instagram): the ad account, Page and Instagram account you choose, so we can place draft ads in your account. Ads we create arrive paused. You decide whether and when they run.
• Klaviyo: campaign and performance metrics.
• Google (Analytics, Search Console, Google Ads): read-only performance data, when those connections are offered.

Access tokens and keys for these connections are encrypted before they are stored. You can disconnect at any time from the platform or by contacting us (see Data deletion).

Information collected automatically on our website

Our website uses analytics and advertising tools that set cookies or similar technologies to understand and reach visitors. Today these are:

• Google Analytics: pages visited, referring site, device and approximate location, to understand how the site is used.
• Microsoft Clarity: how visitors scroll, click and move through pages, including session replays and heatmaps, to improve the site. Clarity masks text you type into forms.
• Meta Pixel: page visits and form submissions, to measure our advertising and show our ads to people who visited the site.

We keep this list current and update it when we add or remove a tool. These tools apply to the public website only. The client portal does not use advertising pixels.

Public information

Our services research publicly available information about brands, products and markets: websites, public social media posts, public ads (such as the Meta Ad Library), marketplace listings, reviews and search results. This is information about businesses, not private individuals, and we don't build profiles of individual people.

How we use information

• To provide our services: reports, creative, content, schema and the client portal.
• To communicate with you: sign-in links, report and review notifications, and replies to your messages.
• To keep our services secure, prevent abuse and fix errors.
• To improve our website and services.
• To market VEWO to businesses, including through our own ads and, from time to time, by email to people who gave us their contact details. Every marketing email includes a way to unsubscribe.
• To meet legal obligations and enforce our agreements.

How we use AI

Our services use AI models from providers such as OpenAI, Anthropic, Google, xAI and Perplexity to research, write and analyze. We send them only what a task needs. We use these providers through business APIs whose terms do not allow them to train their models on the data we send. We do not use one client's data to train models or to serve another client. People on our team review what we deliver to clients.

How we share information

• Service providers who host, store or process data for us, under contracts that limit their use of it. See our sub-processor list.
• The platforms you connect, when we act on your instructions (for example, placing a paused draft ad in your Meta account or publishing a post to your Shopify blog).
• Advertising and analytics partners through the website tools listed above. Under some U.S. state laws, using the Meta Pixel for ads may count as “sharing” personal information for targeted advertising. You can opt out as described below.
• Legal and safety: when required by law, or to protect the rights, property or safety of VEWO, our clients or others.
• Business transfers: if VEWO is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we never sell or license data received from Shopify, Meta, Google or Klaviyo.

Data from Google APIs

VEWO's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you see in VEWO, never for advertising, and we don't transfer it except as needed to provide those features, for security, or to comply with the law.

Your choices

• Cookies: you can block or delete cookies in your browser. Opt out of Google Analytics with Google's opt-out add-on, and manage Meta ads in your Facebook ad preferences.
• Targeted advertising: email hello@vewo.ai with “Opt out of sharing” and we will stop using your information for targeted advertising.
• Marketing email: if we email you about VEWO, use the unsubscribe link in the email or ask us, and we will stop.
• Connected accounts: disconnect at any time. See Data deletion.

Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of targeted advertising. To make a request, email hello@vewo.ai with the subject “Privacy request”. We will verify your request, respond within the time the law requires (usually 45 days), and won't treat you differently for using your rights. If we decline your request, you can appeal by replying to our decision. An authorized agent may make a request for you with your signed permission.

If your information came to us from one of our clients (for example, you are a customer of a store we work with), please contact that business. We will help them respond.

How long we keep information

We keep information while we provide our services and for as long as needed for the purposes above. When a client stops working with us, we delete their connected-account tokens right away and delete or return their data within 30 days, except where we must keep records by law (for example, invoices). Website form submissions are kept only in our email, for as long as needed to follow up, and are deleted on request. Website analytics data is kept according to each tool's retention settings.

Security

We protect information with encryption in transit and at rest, application-level encryption for access tokens and keys, separation of each client's data, restricted staff access and access logging. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

Children

Our services are for businesses and are not directed to children under 16. We do not knowingly collect their information.

Where data is processed

VEWO is based in the United States, and our service providers process data in the United States and other countries. When data about people in the EU, UK or Switzerland is transferred, we rely on appropriate safeguards such as the Standard Contractual Clauses.

Changes to this policy

We will post any changes here and update the effective date. For material changes, we will notify clients by email or in the portal before they take effect.

Contact

VEWO LLC · Phoenix, Arizona · hello@vewo.ai