ReaLiftPrivacy Policy
Last Update At: November 4, 2026
Realift, LLC (“Realift”, “we”, “us” or “our”) provides virtual fitting rooms for businesses that have entered into an agreement with Realift to use the Services (“Merchants”) that allows shoppers to a website that use the Services (“Shoppers”) to learn their measurements, visualize the apparel on them, and confidently purchase products matching the exact look and fit they are seeking using augmented reality. Merchants and Shoppers using our Services are collectively referred to herein as “you” or “your”.
This privacy policy (this “Privacy Policy”) sets forth our policy with respect to information that can be associated with, or which relates to a person and/or could be used to identify a person (“Personal Data”) that is collected from you on or through Realift’s website, applications, and any other products, offerings, or services that link to this Privacy Policy (the “Services”). We take the privacy of your Personal Data seriously. Because of that, we have created this Privacy Policy. By using the Services or interacting with us, you are agreeing to this Privacy Policy. Please read the following carefully to understand how we collect, use, disclose, and maintain information that can be used to identify you. In addition, this Privacy Policy describes your choices for use, access, and correction of your Personal Data. If you do not agree to be bound by this Privacy Policy, please stop using the Services.
1. Changes to this Privacy Policy. We may change this Privacy Policy from time to time. In the event we make changes to this Privacy Policy, we will notify you by revising the “Last Updated” date at the top of this Privacy Policy. If there are significant changes to this Privacy Policy, we will attempt to notify you directly by email or provide information via our home page prior to such changes becoming effective. We encourage you to review our Privacy Policy whenever you use the Services to stay informed of ways you can protect your privacy.
2. Information We Collect and Receive. When you use or interact with us through the Services, we may collect Personal Data. More information about the categories and sources of information is provided below.
2.1 Information You Provided to Us. We collect information that you decide to share with us. At times, we may require you to provide certain information in order to use certain parts of our Services, fulfill your requests, or provide you with certain services.
(a) If you are a Merchant or an authorized user of a Merchant, you may provide your name, email address, and any other information you choose to upload to the Services when you register for an account.
(b) If you are a Shopper, we may ask you (or we may ask your permission to take) a photo, video, body scan, or other image of you to gather multiple data points to predict your body measurements to place apparel on you in a realistic position and scale. We do not share these scans or measurements with any third parties, and we only collect and use that data while you are using our virtual try on feature.
(c) We have pages on social media Services like Facebook, Twitter, Instagram, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Data that you elect to provide to us, such as your contact details and messages sent. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.
(d) You may interact with us through our Services, including through any online contact form, email, or any other communication mechanism. When using these channels, you may provide your name, email, phone number, account information (if any), and any other information you choose to provide at your option.
(e) When you complete any forms or respond to a survey or questionnaire, we collect the Personal Data you provide.
2.2 Information We Automatically Collect. We automatically collect certain information from you when you use the Services, including internet or other network activity information such as your Internet Protocol (“IP”) address, unique device identifiers, browsing and search history within the Services, and cookies and other technologies.
(a) We retain information about you when you access and use the Services. This information can include the following: IP address, timestamps, browser information, Internet Service Provider “ISP”, Web Pages visited, and URL of the webpage you visited before navigating to our Services.
(b) We monitor user activity in connection with the Services and may collect information about the applications and features you use, websites you visit, as well as types and amount of Services you use.
(c) If the Services crash or return an error, we may collect data to determine the cause of the error using first- or third-party services. The crash or error information collected may include the following: Device IP address, device name, operating system version, application configurations(s), the time and date, and other statistics.
2.3 Cookies and Other Technologies.
(a) Like many other websites, our website may use “cookies” or “other technologies” (such as “pixel tags,” “web beacons,”, “clear GIFs”, links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies) to collect information and support certain features of our Services. The Services may include first-party cookies (i.e., cookies that send data directly to Realift and third party service providers acting on Realift’s behalf, including cookies used to monitor, analyze, and administer the Services) and third-party cookies (i.e., cookies that send data to third parties for their commercial use). Although you are not required to accept cookies when you visit our Services, you may be unable to use all of the functionality of our Services if your browser restricts our cookies. We use this information to process your requests and to deliver online and mobile advertisements, messages and content for us and others that are specific to your interests. The information we collect from your web browser and from cookies and other technologies does not identify you personally but in some cases, we may link it to Personal Data. Below we explain the different types of cookies that may be used on the Services.
(b) We use cookies that are session-based and persistent-based. Session cookies exist only during one session. They disappear from your computer or device when you close your browser software or turn off your computer. Persistent cookies remain on your computer or device after you close your browser or turn off your computer. You can control the use of cookies at the individual browser level, but note that if you choose to disable cookies, it may limit your use of certain features or functions on our services and websites.
(c) Below we describe the different types of cookies we may use on the Services and our purpose for using them:
(i) Strictly Necessary Cookies: Some cookies are essential to the operation of our services on the Services. They are used to facilitate our log-in process, authenticate users, and enable you to navigate the Services and to use their features. They are also used by our customer service team for in-product messaging and analytics. Without these cookies, we may not be able to provide certain services or features, and the Services may not perform as smoothly for you as we would like. Because strictly necessary cookies are essential to operate our services on the Services, if you choose to use a product on our Services, there is no option to opt out of these cookies.
(ii) Performance Cookies: We and our third party service providers may use analytics cookies, which are sometimes called performance cookies, to collect information about your use of the Services and enable us to improve the way they work. Analytics cookies collect information about how you use the Services, for instance, which pages you go to most. The information allows us to see the overall patterns of usage, help us record any difficulties users may have while using the Services and show us whether or not our advertising is effective.
(iii) Functionality Cookies: In some circumstances, we may use functionality cookies. Functionality cookies allow us to remember the choices you make while browsing on the Services, and to provide enhanced and more personalized content and features, such as customizing a certain webpage or application page, remembering if we have asked you to participate in a promotion and for other services you request, like watching a video or commenting on a blog. In order to permit your connection to the Services, our servers receive and record information about your computer and browser, potentially including your IP address, browser type, and other software or hardware information. All of these features help us to improve your visit and assist in navigation of the Services’ features.
(iv) Third Party Cookies: We work with Google Analytics in order to collect and analyze information about the use of the Services and report on activities and trends. This service may also collect information regarding the use of other sites, apps and online resources. You can learn about Google’s practices on the Google website.
3. How We Use Your Information. We may use your Personal Data for our legitimate interests and the limited purpose of providing the Services and related functionality and services, as described in this Privacy Policy, and as permitted by applicable laws. These purposes include circumstances where it is necessary to provide or fulfill the Services requested by or for you or where you have given us your express consent. We may use your Personal Data as follows:
(i) To provide the information, products, and services you request;
(ii) To provide you, if you have an active Merchant account, with effective customer service;
(iii) To map your body features in order to facilitate a virtual try on using our augmented reality solution;
(iv) To provide you with a personalized experience when you use our Services;
(v) To contact you with special offers and other information we believe will be of interest to you (in accordance with any privacy preferences you have expressed to us);
(vi) To contact you with information and notices related to your use of the Services;
(vii) To invite you to participate in surveys and provide feedback to us (in accordance with any privacy preferences you have expressed to us);
(viii) To better understand your needs and interests;
(ix) To improve our products and services and develop new products and services;
(x) To improve our marketing and promotional efforts;
(xi) To improve the content, functionality, and usability of the Services;
(xii) To enforce our policies and other agreements;
(xiii) To promote security and to protect against and prevent fraud, claims, and other liabilities;
(xiv) To use for any other purpose for which we provide notice at the time of collection; and
(xv) To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.
3.5 Aggregated Personal Data. In an effort to understand and serve our users better, we may conduct research on our customer demographics, interests, and behaviors using aggregated and/or de-identified information collected through the Services and from other sources so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”).
4. How We Share and Disclose Information.
4.1 Service Providers. To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with third-party vendors, including providers of website hosting, services-related consulting and monitoring, data analysis, information technology and related infrastructure provision, customer service, email delivery, auditing, and other services related to delivering the Services. These third-party vendors may use your Personal Data only in connection with the services they perform on our behalf, and they are bound to protect your Personal Data in a manner consistent with our own policies and practices. On our website, you may choose to use certain features for which we partner with other entities. These features, which may include social networking tools, are operated by third parties that are not affiliated with Realift. These third parties may use Personal Data in accordance with their own privacy policies. On our website on which these features are offered, the relevant third parties are identified. We strongly suggest you review the third parties' privacy policies if you use the relevant features.
4.3 Aggregate/De-Identified Data. From time to time, we may share Aggregate/De-Identified Information about use of the Services, such as by publishing a report on usage trends. The sharing of such data is unrestricted. 4.4 Legal Reasons. We may also disclose your Personal Data when we, in good faith, believe disclosure is appropriate to comply with the law, a court order, or a subpoena. We may also disclose your Personal Data to prevent or investigate a possible crime, such as fraud or identity theft; to protect the security of our Services; to enforce or apply our policies or other agreements; or to protect our own rights or property or the rights, property or safety of our users or others. We will attempt to notify our users about legal demands for their Personal Data when appropriate in our judgment unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague, or lack proper authority.
4.5 Sale, Merger, or Other Business Transfer. As we continue to develop our business, we may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), Personal Data may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third-party, your Personal Data would likely be one of the transferred business assets. If such transfer is subject to additional mandatory restrictions under applicable laws, we will comply with such restrictions.
5. Your Choices.
(a) You may access, review, update, or delete certain Personal Data that you have provided to us by logging into your Merchant account and using available features and functionalities or, if you are not a Merchant, by contacting us in accordance with the “Contact Us” section below. You may also contact us to delete your account. Please note that we will need to verify that you have the authority to delete the account and certain activity generated prior to deletion may remain stored by us and may be shared with third parties as detailed in this Privacy Policy.
(b) Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Services. In addition to adjusting the appropriate settings in your browser, many advertising companies that may collect information for targeted advertising purposes are also members of the Digital Advertising Alliance or the Network Advertising Initiative. Both of these organizations provide directions on how individuals can opt-out from targeted advertising by their members. You can find more information on these opt-out capabilities on www.aboutads.info and www.networkadvertising.org.
(c) You have a choice at any time to stop us from sending you emails for marketing purposes by following the “unsubscribe” link included in these messages. We may still send non-promotional communications such as security alerts, product updates, or notices related to our ongoing business relationship.
(d) In certain circumstances providing Personal Data is optional. However, if you choose not to provide Personal Data that is needed to use some features of our Services, you may be unable to use those features. We will tell you what Personal Data that you must provide in order to receive the Services.
(e) Some browsers offer a “do not track” (“DNT”) option. Since no common industry or legal standard for DNT has been adopted by industry groups, technology companies, or regulators, we do not respond to DNT signals. We will make efforts to continue to monitor developments around DNT browser technology and the implementation of a standard.
6. Security. We take security seriously and has implemented administrative, physical, and technological measures to protect your information from unauthorized access, loss, misuse, disclosure, alteration and destruction. If you wish to report a security concern or if you have a question around security, please submit your inquiry to us using the contact information provided below.
7. Information Retention. We will retain Personal Data required to comply with privacy requests, manage active accounts, as required by law, in order to resolve disputes, or enforce our agreements. We will retain the Personal Data we process on behalf of our users as directed by them. We may also retain copies of your Personal Data for disaster recovery purposes, to prevent fraud or future abuse, or for legitimate business purposes.
8. International Users. The Services are hosted in the United States and are intended for and directed to users in the United States. If you are a user accessing the Services from the European Union, Asia, or any other region with laws or regulations governing Personal Data collection, use, and disclosure that differ from United States laws, please be advised that through your continued use of the Services, which are governed by U.S. law, this notice and our other policies that govern your use of the Services, you are transferring your Personal Data to the United States and you consent to that transfer. The Services are not intended to subject us to the laws or jurisdiction of any state, country, or territory other than those of the United States. Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers and, by using the Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have different data protection rules than those of your country.
9. Links to Third-Party Websites. The Services may contain links to other websites not operated or controlled by us, including social media services (“Third Party Websites”). The information that you share with Third Party Websites will be governed by the specific privacy policies and terms of service of the Third Party Websites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these websites. Please contact the Third Party Websites directly for information on their privacy practices and policies.
10. Children’s Information. The Services are directed to individuals at the age of 13 and over. We do not knowingly collect Personal Data from individuals under the age of 13. If we become aware of individuals who have provided us with Personal Data and are under the age of 13, we will take steps to deactivate the account and delete the Personal Data. If you become aware of information from individuals under the age of 13 which has been provided to us, please contact us in accordance with the “Contact Us” section below.
11. Contact Us. If you have any questions or concerns about our Privacy Policy, please contact us via email at ron@getrealift.com.
ReaLook
ReaLook is a size-recommendation and virtual try-on service that merchants add to their Shopify online stores. This section explains what Realift, LLC ("ReaLift", "we") handles when you use ReaLook, either as a shopper on a store that uses ReaLook or as a merchant who installed it. Where this section differs from the rest of this policy, this section applies to ReaLook.
1. Who is responsible
- Shoppers. The merchant whose store you shop on decides to offer ReaLook and is responsible for your data as the controller. ReaLift processes it for the merchant, as its processor, to provide ReaLook.
- Merchants. ReaLift is the controller of merchant account, installation and billing data.
2. What we handle
From shoppers
| Data | When | Notes |
|---|---|---|
| Body measurements (for example chest, waist, hip, inseam), and the height, weight, gender selection and jeans size you typed to get them | Quick estimate, or after a body scan | Saved under a pseudonymous profile for that one store. The profile has no name, email or Shopify customer id. |
| Front and side photographs of your body | Only if you choose a phone body scan | Used once to compute measurements, then deleted (see section 6). |
| A photograph of yourself for virtual try-on, and the picture we generate from it | Only if you choose virtual try-on and give consent | Available only on stores that offer it. See sections 4 and 6. |
| Your consent choices | When you give or refuse consent | Stored with the date and the policy version. |
| A device credential | When you first use ReaLook on a store | Kept in your browser's local storage on that store's site so ReaLook recognises your device. It carries no personal details. |
| Technical data | Always | Request times, error and performance information. We do not put measurements, photos or links to photos in logs. |
Not sent to us. If you use "auto-detect from selfie", your selfie is read on your device to suggest a skin tone and hair colour. The photo is not uploaded, saved, or sent anywhere. The skin, hair and body-shape choices that draw your avatar are not sent to or stored by ReaLook.
From merchants and their orders
| Data | Notes |
|---|---|
| Store address, installation details and Shopify access credentials | Needed to run the app. Cleared when the app is uninstalled. |
| The merchant's size charts and ReaLook settings | Size-chart images may be read with Google's Gemini service (section 4). |
| Billing plan and charges | Billing runs through Shopify. |
| Order data (see below) | Received from Shopify to charge for, and report on, orders that used a ReaLook recommendation. |
Order data. When a shopper buys an item on a ReaLook recommendation, Shopify tells us about the order. Shopify's notice also contains customer details, which we do not read or keep. We keep only: the order id and the order number (for example "#1001"), the line item id, the product and variant ids, the quantity, the price and currency, and the time. We keep no customer name, email address, postal address or phone number, and we never request them. The cart line carries a signed code that proves the item was bought after a ReaLook recommendation; the code contains nothing about the shopper.
3. Why we use it
- To compute and show size recommendations and the fit view (measurements).
- To produce a virtual try-on image, when you ask for one (try-on photo).
- To charge merchants per item sold on a recommendation, apply credits when items are returned, and show merchants their revenue, returns and usage figures (order data).
- To keep the service secure, prevent abuse and fraud, and fix faults.
- To comply with law.
We do not use shopper data to advertise, we do not sell it, and we do not use it to build profiles of shoppers across stores.
4. Who we share it with
| Provider | Purpose | Data |
|---|---|---|
| Amazon Web Services (United States, us-east-1) | Hosting, storage, databases, queues | All ReaLook data, encrypted |
| Google (Gemini API) | Generating virtual try-on images, where available; reading merchants' size-chart images | The try-on photo and product picture; the size-chart image. Not your measurements. |
| Body-measurement provider | Computing measurements from body-scan photos | Scan photos with metadata removed |
| Shopify | Platform, billing, order and compliance notices | As described |
We share data with merchants only as follows: a merchant sees usage counts and order-based figures for its own store; it does not see a shopper's photos or individual measurements. We do not share data between stores. We disclose data when the law requires it.
5. Your choices
- You can decline photos and use the quick estimate (typed height and weight) instead.
- Try-on needs your consent before any photo is sent. You can refuse it and still get a size recommendation.
- We do not sell personal data and do not share it for advertising.
6. How long we keep it
| Data | Kept for |
|---|---|
| Body-scan photos | At most 24 hours, then deleted automatically |
| Phone-scan pairing code and session | 5 and 15 minutes |
| Try-on photo | Deleted when the try-on finishes; backup copy within 24 hours |
| Generated try-on picture | 7 days, then expires |
| Measurements and profile | Until you or the store ask us to delete them, or until the merchant uninstalls ReaLook and Shopify sends its store-data request (section 7) |
| Consent records | As long as the profile they belong to |
| Order records (order lines, refunds) | Until the merchant uninstalls ReaLook, then deleted on Shopify's store-data request |
| Monthly order totals (counts and sums, no order ids) | As finance and tax law require |
| Billing and audit records | As finance and tax law require |
| Merchant installation data | Until the app is uninstalled, then deleted on Shopify's store-data request |
Deleted data may remain in encrypted backups for a short period and is then overwritten.
7. Deletion and your rights
- Shoppers. Because profiles are pseudonymous and are not linked to your name or Shopify customer id, we cannot look you up by name or email. Ask the store you used; the store can ask us to delete the data, and a request that identifies the device or profile reaches us at ron@getrealift.com.
- Shopify privacy requests. When Shopify sends a customer data or erasure request, we process it. We hold no data linked to a Shopify customer id, so the answer is that there is nothing linked to that customer.
- Store removal. When a merchant uninstalls ReaLook, we revoke its access and stop all work at once. When Shopify then sends its store-erasure request, we delete that store's profiles, photos, order records and billing records.
- You may have rights to access, correct, delete, restrict or object, and to complain to a regulator, depending on where you live. Contact us using the details below.
8. Automated decisions
ReaLook recommends a size and draws an avatar from numbers. These are suggestions for the shopper; they do not decide anything with legal or similarly significant effect, and the merchant's sale does not depend on them. A try-on picture is an illustration, not a promise of fit.
9. Security
- Traffic is encrypted in transit (HTTPS/TLS).
- Photos are stored in private, encrypted storage, with no public access, and are retrieved only through short-lived signed links. Databases are encrypted at rest.
- Photos are re-encoded to remove embedded information before processing.
- Each store's data is kept separate from every other store's.
- Access to production data is restricted to authorised staff, with sign-in through the company account provider.
- We do not write measurements, photos or links to photos into logs.
If we learn of a breach affecting personal data, we will notify the merchant without undue delay, and the authorities as the law requires.
10. International transfers
ReaLook data is stored in the United States. See section 8, International Users.
11. Contact
Realift, LLC · ron@getrealift.com
12. Changes
We will update this section when ReaLook changes what it handles, and change the date at the top of this policy.
KeepSize
KeepSize is an app that merchants add to their Shopify online stores. When a shopper adds two sizes of the same product to the cart, KeepSize offers them a gift card to keep just one. This section explains what Realift, LLC ("ReaLift", "we") handles when you use KeepSize, either as a shopper on a store that uses KeepSize or as a merchant who installed it. Where this section differs from the rest of this policy, this section applies to KeepSize.
1. Who is responsible
- Shoppers. The merchant whose store you shop on decides to offer KeepSize and is responsible for your data as the controller. ReaLift processes it for the merchant, as its processor, to provide KeepSize.
- Merchants. ReaLift is the controller of merchant installation, settings and billing data.
2. What we handle
From shoppers
| Data | When | Notes |
|---|---|---|
| Shopify customer id | When an order earns a gift card | Used to link the gift card to the buyer so Shopify can email it to them. We don't store it. |
| Email address | Only when the merchant turns on the "3 gift cards per email" limit | We store a one-way hash of the address (SHA-256) with the ids of the orders that earned a gift card. We never store the address itself. |
| Offer status | When the KeepSize offer appears | Kept in your browser's session storage on that store's site, so the offer isn't shown twice in one visit. It carries no personal details and is cleared when the browser session ends. |
Not collected. We don't collect shoppers' names, phone numbers, postal addresses or payment details. The KeepSize offer sets no cookies, doesn't track shoppers across sites, and sends nothing about the shopper to ReaLift. The cart records which product and size were kept, so the reward can be applied when the order is paid. That record contains nothing about the shopper.
From merchants and their orders
| Data | Notes |
|---|---|
| Store address, installation details and Shopify access credentials | Needed to run the app. Access credentials are stored encrypted. |
| KeepSize settings | For example, the gift card limit. |
| Billing plan and charges | Billing runs through Shopify. We never see card or bank details. |
| Order data (see below) | Received from Shopify to create the reward, charge for confirmed saves and report results to the merchant. |
Order data. When a shopper pays for an order after keeping one size, Shopify tells us about the order. Shopify's notice may also contain customer details, which we do not keep, apart from the email hash described above. We keep only: the order id and the order number (for example "#1001"), the product id and title, the size that was kept, the item value, the order value and currency, whether the item was refunded, and the dates and status of the save.
3. Why we use it
- To show the offer and apply the reward to the order.
- To create the gift card in the merchant's store and link it to the buyer, so Shopify can email it to them.
- To avoid rewarding the same order twice, and to apply the merchant's per-email gift card limit.
- To charge merchants for each save that holds after the return window, through Shopify, and to show merchants their saves, revenue kept, returns and usage.
- To keep the service secure, prevent abuse and fix faults.
- To comply with law.
We do not use shopper data to advertise, we do not sell it, and we do not use it to build profiles of shoppers across stores.
4. Who we share it with
| Provider | Purpose | Data |
|---|---|---|
| Amazon Web Services (United States, us-east-2) | Hosting, databases, queues | All KeepSize data, encrypted |
| Shopify | Platform, gift cards and gift card emails, billing, order and privacy notices | As described |
We share data with merchants only as follows: a merchant sees saves and order-based figures for its own store. We do not share data between stores. We disclose data when the law requires it.
5. Your choices
- Shoppers can close the offer or keep both sizes. The offer is a choice, not a condition of buying.
- Merchants choose whether to limit gift cards per email. With the default "Unlimited" setting, no email hash is stored.
- We do not sell personal data and do not share it for advertising.
6. How long we keep it
| Data | Kept for |
|---|---|
| Email hash and reward history | Until the merchant uninstalls KeepSize, or until Shopify sends an erasure request for that customer |
| Order records (saves, refunds and charges) | Until the merchant uninstalls KeepSize, then deleted on Shopify's store-data request |
| Shopify order notices | At most 4 days in an encrypted processing queue. A notice that fails to process is kept up to 14 days so it can be retried. |
| Merchant installation data and settings | Until the app is uninstalled, then deleted on Shopify's store-data request |
Deleted data may remain in encrypted backups for up to 35 days, and is then overwritten.
7. Deletion and your rights
- Shoppers. Ask the store you bought from. The store's request reaches us through Shopify, and we act on it.
- Shopify privacy requests. When Shopify sends a customer data request, we hold nothing readable about that customer: only an email hash and order ids. When Shopify sends a customer erasure request, we delete that customer's email hash and reward history.
- Store removal. When a merchant uninstalls KeepSize, we stop all work for that store. When Shopify then sends its store-erasure request, 48 hours after the uninstall, we delete all of that store's data.
- You may have rights to access, correct, delete, restrict or object, and to complain to a regulator, depending on where you live. Contact us using the details below.
8. Automated decisions
KeepSize offers a gift card when a cart holds two sizes of the same product, and applies the merchant's gift card limit. These are offers to the shopper. They do not decide anything with legal or similarly significant effect.
9. Security
- Traffic is encrypted in transit (HTTPS/TLS).
- Databases and queues are encrypted at rest. Shopify access credentials are encrypted again with a separate key.
- Backups are encrypted.
- Each store's data is kept separate from every other store's.
- Access to production data is restricted to authorized staff.
- We store a hash of a shopper's email, never the address itself.
If we learn of a breach affecting personal data, we will notify the affected merchants without undue delay, and the authorities as the law requires.
10. International transfers
KeepSize data is stored in the United States. See section 8, International Users.
11. Contact
Realift, LLC · ron@getrealift.com
12. Changes
We will update this section when KeepSize changes what it handles, and change the date at the top of this policy.