Security
Plain language explanation of how Zolvio handles your data and keeps it secure.
What We Collect
Session Recordings: We record how visitors interact with your store - mouse movements, clicks, and scrolling. This helps you see exactly what visitors do.
Click Events: We track where visitors click to generate heatmaps showing popular areas.
Scroll Data: We measure how far visitors scroll down your pages.
Device Info: Browser type, device type (desktop/mobile), and approximate country.
What we DON'T collect: Credit card numbers, passwords, personal addresses, email addresses typed into forms, or any payment information.
Screenshot Handling
For heatmaps and AI audits, we capture screenshots of your store pages.
- Screenshots are used to overlay click/scroll data
- They help our AI analyze page layouts
- Screenshots are stored securely and deleted after your retention period
- They're only accessible to you and our processing systems
Theme Clone Handling
When generating fix instructions, we may create a temporary copy of your theme to:
- Analyze your theme's structure
- Generate accurate, theme-specific instructions
- Test that our suggested fixes work correctly
Important: We do NOT auto-modify your live theme. Theme copies are used only to generate instructions. You remain in full control of all changes to your store.
Data Retention
How long we keep your data depends on your plan:
| Plan | Retention |
|---|---|
| Starter (Free) | 7 days |
| Growth | 60 days |
| Pro | 180 days |
After this period, data is automatically and permanently deleted. You can also request immediate deletion at any time.
Access Controls
Who can see your data:
- You and your team: Anyone with access to your Shopify store can view Zolvio data
- Zolvio support: Only when you request help, and only the minimum needed
- Automated systems: For processing recordings and generating insights
We never sell your data. We never share it with advertisers. Your data is yours.
Privacy Compliance
Zolvio is designed to help you comply with privacy regulations:
- GDPR: We support data export and deletion requests
- CCPA: California visitors can request their data
- Cookie consent: Our script respects visitor consent choices
- Data minimization: We only collect what's needed
You should still update your privacy policy to mention session recording and analytics.
Questions about security or data handling?
Contact us at security@zolvio.io