This Privacy Policy explains how Revenome (“Revenome”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you use our website at https://revenome.com and our analytics platform (collectively, the “Service”).
We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the Serbian Law on Personal Data Protection, and the platform-specific requirements of Shopify, Google, and Meta.
The data controller responsible for your personal data is:
ROMAN DRUZYK PR BEOGRAD (a sole proprietor registered in the Republic of Serbia)
trading as Revenome
This Policy applies to:
When you, as a Merchant, connect your e-commerce store to Revenome, you remain the data controller for your end-customers' data, and Revenome acts as your data processor. The processing terms are governed by our Data Processing Agreement, which forms part of our Terms of Service.
When you connect a third-party platform via OAuth, we receive the data you authorize:
Shopify:
Google Ads (via Google Ads API):
Meta (Facebook & Instagram, via Meta Marketing API):
| Purpose | Legal Basis |
|---|---|
| Provide the Service (analytics, dashboards) | Performance of contract (Art. 6(1)(b)) |
| Authenticate users and secure accounts | Performance of contract; legitimate interest (Art. 6(1)(f)) |
| Process payments and manage billing | Performance of contract; legal obligation (Art. 6(1)(c)) |
| Send marketing emails about Revenome | Consent (Art. 6(1)(a)); withdrawable at any time |
| Improve and develop the Service | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Detect, prevent, and address fraud | Legitimate interest |
We do not use your personal data for automated decision-making or profiling that produces legal effects on you.
Revenome's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Ads data only to provide the user-facing analytics features you explicitly requested. We do not transfer Google Ads data to third parties for advertising purposes, retargeting, or personalized advertising.
Revenome accesses Meta data only with your explicit OAuth authorization. We comply with Meta Platform Terms.
You can revoke access at any time by disconnecting in Revenome (Settings → Integrations → Meta → Disconnect) or at facebook.com/settings. To request deletion of Meta-derived data, email roman@revenome.com.
Revenome implements Shopify's mandatory privacy webhooks:
We do not sell, rent, or trade your personal data.
| Sub-processor | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Application and database hosting | Germany (EU) |
All customer data is hosted exclusively on infrastructure located in Germany. We do not transfer customer data outside the EEA for storage.
We exchange data with platforms you explicitly connect. Their privacy policies:
We may disclose personal data when legally required or to protect the rights, property, or safety of Revenome, our users, or others.
All personal data is stored and processed within the European Union (Germany). Where personal data is transferred outside the EEA (for example, when you connect a US-based platform), the transfer is governed by the receiving platform's own safeguards, including EU Standard Contractual Clauses and the EU-US Data Privacy Framework.
| Data Category | Retention Period |
|---|---|
| Account data | Duration of account + 30 days |
| Connected-platform data | Duration of subscription + 30 days |
| Billing and tax records | 10 years (Serbian tax law) |
| Support correspondence | 3 years from last interaction |
| Server and security logs | 90 days |
| Marketing consent records | Until withdrawn + 3 years |
After the applicable retention period, data is securely deleted or irreversibly anonymized.
We implement appropriate technical and organizational measures to protect personal data, including:
In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours and, where required, notify affected data subjects without undue delay.
Under GDPR and the Serbian Law on Personal Data Protection, you have the following rights:
To exercise any of these rights, email roman@revenome.com. We will respond within 30 days.
We do not use third-party advertising cookies, retargeting pixels, or cross-site tracking. You can manage preferences through the cookie banner or your browser settings.
The Service is intended for business use by individuals aged 18 or older. We do not knowingly collect personal data from children under 16. If you believe we have, please contact roman@revenome.com.
We may update this Policy from time to time. Material changes will be communicated by email at least 14 days before they take effect, and by posting the updated Policy at revenome.com/privacy with a revised date. Continued use of the Service after changes take effect constitutes acceptance.
For any questions about this Privacy Policy or to exercise your rights:
ROMAN DRUZYK PR BEOGRAD (Revenome)
Resavska 33, 11100 Belgrade, Serbia
Privacy inquiries: roman@revenome.com
General inquiries: roman@revenome.com
We aim to respond to all privacy-related requests within 30 days.