Behavio App Privacy Policy

Effective Date: January 2026  |  Last Updated: January 14, 2026

1. Introduction

This Privacy Policy explains how Behavio ("we," "us," or "our") collects, uses, and protects your data when you use our Shopify app. We are committed to protecting your privacy and complying with Israel's Privacy Protection Law (Amendment 13, 2025).

By installing and using our app, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Behavio
Email: support@behavio.io

3. Data We Collect

3.1 Shop Data (from Shopify)

Data TypePurposeSensitivity
Shop domain and nameApp functionality and identificationMedium
Shop emailCommunication and supportMedium
Access tokensAPI authorizationHigh
Order data (anonymized)Analytics and purchase predictionMedium

3.2 Visitor Behavior Data (from Web Pixel)

Data TypePurposeRetention
Session identifiers (sessionID, visitorId)Track visitor journey90 days
Time on page and scroll depthMeasure engagement90 days
Click countsUnderstand interactions90 days
Product views, cart actions, wishlistPurchase intent prediction90 days
Traffic source (UTM, gclid, fbclid)Marketing attribution90 days
Device type, browser, OSOptimize experience90 days

3.3 What We Do NOT Collect

4. How We Use Your Data

PurposeDescriptionLegal Basis
Provide analyticsReal-time visitor statistics and behavior insightsPerformance of contract
Predict purchase intentIdentify high-intent visitors using machine learningLegitimate interest
Optimize conversionsHelp you offer personalized incentivesLegitimate interest
Improve our serviceAnalyze aggregate patterns to enhance functionalityLegitimate interest

4.1 Automated Decision-Making

Our app uses machine learning algorithms to predict visitor purchase intent. This automated processing:

5. Data Protection Measures

MeasureDescription
Customer ID HashingSHA-256 hashing before storage prevents identification
Encrypted TransmissionAll data transmitted over HTTPS/TLS
Access ControlOnly authenticated shop owners access their data
Data IsolationEach shop's data is isolated using unique identifiers

6. Data Retention

Data TypeRetention Period
Session/behavioral data90 days
Aggregated analytics1 year
Shop configurationUntil app uninstall + 48 hours

After the retention period, data is automatically deleted. You can also request immediate deletion at any time.

7. Your Rights

Under Israel's Privacy Protection Law (Amendment 13), you have the following rights:

To exercise any of these rights, contact support@behavio.io. We will respond within 30 days.

8. GDPR Compliance (Shopify Requirements)

We implement all mandatory Shopify GDPR webhooks:

Request TypeOur Response
Customer Data RequestExport all customer-related data
Customer RedactionDelete all customer data
Shop RedactionDelete all shop data within 48 hours

9. Third-Party Services

ServicePurposeData Shared
ShopifyE-commerce platformOrder data, shop info
RenderCloud infrastructureAll app data (encrypted)

We do not sell, rent, or share your data with third parties for marketing purposes.

10. Data Sub-Processors

Sub-ProcessorLocationPurpose
Render.comUnited StatesDatabase and API hosting
PostgreSQL (Render)United StatesData storage

11. International Data Transfers

Your data may be transferred to servers located in the United States. We ensure appropriate safeguards are in place to protect your information in accordance with applicable law.

12. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries or to exercise your rights:

Email: support@behavio.io
Response Time: Within 30 days as required by law