We use cookies to provide essential site functionality, remember preferences, and analyze site usage. By clicking "Accept" you consent to analytics and non-essential cookies. You can decline to disable analytics.
Privacy Policy
Effective date: October 23, 2025
This Privacy Policy describes how Zuvro ("we", "us", "our", "Zuvro") collects, uses, and shares personal information when you use our website and services at www.getzuvro.com (the "Service").
About the Service
Zuvro provides a multi-tenant e-commerce platform that allows people to create online shops, upload and manage products, and sell goods through either:
a free plan where shops live under our main domain, e.g. getzuvro.com/shop/shop-name, and
a paid plan where customers may connect their own custom domain (for example www.yourshop.com).
Information we collect
We collect information that you provide directly and information collected automatically when you use the Service.
Analytics: aggregated analytics data to improve the Service.
Cookies & similar technologies: described below in the Cookies section.
How we use information
We use the information we collect for purposes including:
to provide, operate, maintain, and improve the Service;
to create and manage your shop, display and process product listings, accept orders and payments;
to verify and validate custom domains and configure hosting for those domains;
to send transactional messages (order confirmations, billing receipts, account notifications);
to respond to support requests and communicate about your account;
to detect and prevent fraud, abuse, or illegal activity;
to comply with legal obligations and enforce our Terms of Service;
for research and analytics to improve the Service.
Sharing and disclosure
We do not sell your personal data. We may share data in the following ways:
Service providers
We share information with third-party service providers who perform services on our behalf (for example, payment processors, hosting and CDN providers, email delivery services, analytics providers, and fraud prevention services). These providers are contractually bound to protect your information and only use it as we direct.
Payment processors
When you accept payments through your shop, payment information is processed by third-party payment processors (e.g., Stripe, PayPal or others you choose at checkout). We do not store full card numbers on our servers; payment details are handled by the payment processor. Please review the privacy policy of the payment processor you use.
Business transfers
If Zuvro is involved in a merger, acquisition, financing, or sale of assets, user data may be transferred as part of that transaction (subject to confidentiality obligations).
Legal
We may disclose information where required by law, to respond to legal processes, protect our rights, or to investigate fraud or security issues.
Custom domains & DNS
If you connect a custom domain to your paid shop, we will store the domain name and the DNS verification records you provide (for example, CNAME, A records or TXT tokens) in order to set up hosting and SSL. By connecting a domain you confirm you have the right to use that domain.
Important: unless you change DNS to point elsewhere, traffic to a free plan shop will continue to use our hosting and be under the main getzuvro.com domain. For custom domains we configure SSL and routing on your behalf—but you remain responsible for domain registration and renewals.
Data retention
We retain account and shop data as long as necessary to provide the Service and for legitimate business purposes such as fraud prevention, record keeping, or compliance with legal obligations. If you close your account, we will typically retain certain information for a limited period to permit recovery, enforce our agreements, and maintain records. If you wish to request deletion, see Your rights.
Security
We implement reasonable administrative, technical, and physical safeguards designed to protect information. This includes access controls, encryption in transit (TLS), and other measures. However, no system can be 100% secure. You are responsible for keeping your account credentials secure; choose a strong password and enable any available security features.
Cookies and tracking
We use cookies and similar technologies for authentication, security, preferences, analytics, and advertising. You can control cookie settings through your browser, but disabling certain cookies may limit functionality or prevent use of some features.
We use a cookie consent mechanism that allows you to accept or decline non-essential cookies (see the banner). Analytics and other non-essential scripts will only be loaded if you accept.
Third-party links & services
Your shop may integrate with or link to third-party services (payment gateways, shipping providers, marketing tools). These services have their own privacy practices. We are not responsible for the privacy practices of those third parties—please review their privacy policies before using them.
GDPR (European Union & UK) — Data protection rights
If you are located in the European Union or the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR may apply to you. Under these laws you may have certain rights in relation to your personal data, including:
Right of access: request a copy of personal data we hold about you.
Right of rectification: correct inaccurate or incomplete data.
Right to erasure: request deletion of personal data, subject to legal exceptions (for example, records we must keep for tax/financial reasons).
Right to restrict processing: request limits on processing your personal data in certain circumstances.
Right to data portability: receive certain data in a portable format.
Right to object: object to processing based on legitimate interests or for direct marketing.
Lawful bases: we rely on lawful bases such as performance of a contract (providing your account and shop), compliance with legal obligations, consent (where requested), and our legitimate interests (fraud prevention, platform improvements) where appropriate.
To exercise GDPR or UK GDPR rights, contact us at [email protected]. We may require information to verify your identity before responding. If you're not satisfied with our response, you may have a right to lodge a complaint with your local supervisory authority (for example an EU member state's Data Protection Authority or the UK ICO).
CCPA (California) — Consumer privacy rights
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) may give you additional rights. Under these laws you may have the right to:
Know: request information about the categories of personal data we collect, sell, or share, and the purposes for which we use it.
Access: request a copy of personal data we hold about you.
Delete: request deletion of personal data (subject to exceptions).
Opt-out of sale/sharing: opt out of the sale or sharing of personal information. (We do not sell personal data for money; if this changes we will provide an opt-out.)
Non-discrimination: not be discriminated against for exercising these rights.
To submit a request under the CCPA/CPRA, contact [email protected]. We will verify requests and respond within the timeframes required by law.
Your rights & choices
Depending on your location and applicable law, you may have rights regarding your personal data, including:
Access: request a copy of personal data we hold about you.
Correction: request correction of inaccurate data.
Deletion: request deletion of your account and personal data (subject to retention needed for legal compliance or legitimate business purposes).
Portability: request a machine-readable copy of certain data you provided to us.
Opt-out: opt out of certain marketing communications.
To exercise these rights, contact us at [email protected]. We may need to verify your identity before responding to requests. We will respond in accordance with applicable law.
Children
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected personal data from a child under 13, please contact us at [email protected] and we will take steps to remove such information.
International transfers
Zuvro operates globally. Information collected may be stored and processed in any country where we or our service providers operate. By using the Service, you consent to transfer of information to countries that may have different data protection laws than your country.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy with a new "Effective date" and, where appropriate, by other means (such as email).
Contact us
If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact: