Privacy notice

Who we are

JV Pro Labs is operated by Justin Verley, a sole proprietor doing business as JV Professional Marketing in Florida, United States. Contact jvprofessionalmarketing@gmail.com about privacy or support.

This notice covers our website, support and our independently installed Shopify apps, including the additional apps described below. Planned apps do not collect store data merely because they appear on our roadmap. It does not replace a merchant’s or Shopify’s notice. We process store customer information on the merchant’s instructions under our data processing terms.

Information used by each app

Each installed app uses its store’s Shopify domain, authorized connection credentials, product and campaign settings, activity and plan information. Relevant order, line and refund references support app-attributed reporting and any approved usage billing. Information comes from the authorized Shopify connection, shopper actions and support messages.

• Accord: product, offer amount, quantity, email, optional note, decision and checkout references.
• Echo: email, requested product, consent text and time, stock availability, delivery status and return-to-store attribution.
• Ahead: products, quantity, expected date, full-payment preorder option and relevant orders.
• Duet: paired products, quantities, savings and bundle checkout references.
• Ladder, Perk and Nudge: qualifying products, quantities, promotion settings, requested gifts or recommendations and relevant order/discount information.
• Parcel: wrapping product, quantity, shopper-provided gift note and relevant order information.
• Keeps: saved products, a random functional browser identifier, an authenticated Shopify customer reference where available for privacy requests, save/remove events and wishlist-to-cart activity.
• Meter: shipping threshold, cart subtotal and progress/allowance events. A progress view is not a paid sale.

Payment-card entry takes place through Shopify checkout and the merchant’s payment provider. Our apps do not ask shoppers to send us card details. Do not include credentials, card details or unrelated customer records in support messages or gift notes.

Purposes and providers

We use information to provide the selected app, deliver requested messages, show campaign results, enforce allowances, calculate approved app charges, secure and maintain the service, and handle support/privacy requests. We do not sell customer data, share it for advertising, or use it outside these app and service purposes.

Shopify processes installation, commerce and app billing information. Cloudflare provides app hosting, storage and network security. Resend delivers enabled transactional messages, including Accord offer updates, Echo restock notifications and Signal merchant inventory alerts. Google’s Gmail handles support correspondence. OpenAI Sites with Cloudflare infrastructure hosts this publisher website. Providers receive information needed for those services. We may disclose information when applicable law requires it.

Provider notices: Shopify, Cloudflare, Resend, Google, and OpenAI.

Additional apps

Fit stores merchant-provided size charts and product assignments. Clarity reads product metadata for SEO checks and stores approved edits and change history. Tailor stores option definitions; shopper personalization is attached to the Shopify cart line and order. These apps do not create advertising profiles.

Signal reads product variants, inventory availability and locations. It stores monitor thresholds, readings, plan status and a merchant-chosen, encrypted alert address. Email verification does not enable alerts: the merchant must enable delivery separately and can stop it in the app or through the digest unsubscribe link. Signal never changes inventory or sends buyer marketing. Verification codes expire after 15 minutes; message/event history expires after 90 days. Uninstall stops monitoring and emails, with remaining Signal shop data eligible for erasure after 30 days or earlier verified redaction.

Folio is in development and is not available for installation. Its intended delivery service uses merchant-uploaded files, product/variant assignments, verified paid-order and refund status, and the buyer email needed to deliver expiring download links. Private file scanning and controlled storage support that service. It does not request buyer names, phone numbers or addresses, and does not use delivery information for advertising. Its operating procedures and launch acceptance must be completed before release.

Trace is in development and is not available for installation. Its order-status service uses Shopify order, customer and fulfillment identifiers, shipment status and event times, and carrier tracking URLs. It checks the signed-in customer owns the requested order before returning status. It does not request buyer names, emails, phone numbers or addresses, and does not sell data or use it for advertising or unrelated automated decisions. Tracking records expire after 30 days; operational audit and privacy records follow a 90-day schedule, subject to limited documented holds. Merchant controls, signed privacy requests and uninstall handling govern access and deletion. Live acceptance is required before release.

YouTube videos

Our demo pages include embedded YouTube players from youtube-nocookie.com. Your browser connects to YouTube when a player loads. YouTube processes connection and playback information under Google’s privacy policy. Videos do not autoplay.

Browser storage and email choices

Keeps uses first-party browser storage for saved products and its visitor identifier. Items expire after 90 days without an explicit save or wishlist-cart action; expired local data is removed when the widget next runs. Clearing browser storage removes the visible list but does not itself erase server records.

Echo requests consent for one product’s stock notification, for up to 90 days. Its cancellation link opens a confirmation page; choosing “Cancel my notification” stops that request and queued messages. Opening the page alone does not cancel it. Sent emails cannot be recalled. Accord uses the submitted email to follow up on the offer.

Retention and deletion

Active campaign settings remain while needed for the installed service. Automated cleanup generally retires identifying closed interaction records 90 days after the latest applicable completion, sale or refund. Preorders also remain through 90 days after their release date. Restock requests expire after 90 days. Inactive server wishlist saves expire after 90 days, then follow the closed-record retention period.

Notification recipients/content are removed with the retired interaction or 90 days after sending or creation. Completed privacy-request identifiers and access-audit entries become eligible for removal after 90 days. Daily cleanup and checks before active use enforce these periods.

Pending verified privacy requests, unresolved billing/refund operations or documented legal obligations can require limited evidence to be held longer. Nonidentifying aggregate results and necessary billing receipts can remain after customer/order links are removed.

Cloudflare’s storage recovery history can retain earlier states for up to 30 days. Provider delivery/security logs and support correspondence have separate retention rules and request-handling needs. A verified deletion request includes checking relevant provider records and exports. Active-database deletion does not immediately erase every provider backup; applicable deletions must be reapplied to restored data before service resumes.

Uninstall revokes the connection and stops queued future work. It does not cancel merchant orders or erase records independently held by Shopify or the merchant. Verified redaction and the retention schedule govern remaining app records.

Security and international processing

Business access to merchant data is limited to the owner. Administrative accounts use unique passwords and two-factor authentication. Apps use authenticated Shopify requests, encrypted access tokens and protected transport. Restricted audit records contain time, app/store, operator or system actor, operation and outcome; they exclude message bodies, customer contact details and credentials. Infrastructure providers also process network and security information.

Cloudflare hosts app data; our configuration does not promise a particular country of storage. Information may be processed in the United States and other countries where providers operate. No service can guarantee absolute security.

Privacy requests and changes

For a purchase or information submitted to a store, contact that merchant first. You may also email us with the app name, store domain and the request. We verify identity or authority before disclosure and assist merchants within applicable legal and Shopify deadlines.

Depending on your location, applicable rights can include access, correction, deletion, portability, restriction, objection, withdrawal of consent and complaint to a privacy regulator. We do not discriminate for exercising applicable privacy rights.

Changes appear here with a revised effective date. Material changes affecting installed services will be communicated through the app or merchant contact channel where required.