Privacy Policy
Last updated: April 2026
1. Who we are
Retain is a service operated by Retain SAS, registered in France, headquartered in Paris. For any question, contact us at hello@retainapp.io.
2. Data we collect
When you use Retain, we collect the following data:
- Account data: name, work email, brand name, business size.
- Klaviyo and Shopify data: via official APIs, read-only. This includes customer profiles, campaigns, flows, segments, performance metrics and order history.
- Usage data: pages visited, features used, session length. No advertising tracking.
3. Why we collect this data
- Deliver the Retain service: analyze your CRM data, identify revenue opportunities, generate recommendations.
- Improve the product: understand how users interact with the tool to make it more useful.
- Communicate with you: support, new features, service information.
4. Hosting and location
All data is hosted in the European Union (France and Germany). No data is transferred outside the EU without appropriate safeguards.
5. Security
- Data encryption at rest and in transit (TLS 1.3, AES-256).
- Data access strictly limited to authorized employees.
- Regular security audits.
- Klaviyo and Shopify API tokens encrypted in the database.
6. Your rights (GDPR)
Under GDPR, you have the following rights:
- Access: obtain a copy of your data.
- Rectification: correct inaccurate data.
- Deletion: request deletion of your data.
- Portability: export your data in a standard format.
- Objection: object to certain processing.
To exercise these rights, contact hello@retainapp.io. We will respond within 30 days.
7. Data retention
Your data is kept as long as your account is active. When you terminate, your data is deleted within 30 days, unless legally required to retain it.
8. Cookies
Retain only uses functional cookies necessary for the application to work (session, authentication). No advertising or third-party tracking cookies.
9. Sub-processors
We use the following sub-processors, all GDPR compliant:
- Supabase (database hosting, EU)
- Anthropic (AI generation, DPA in place)
- Netlify (front-end hosting)
- Stripe (payments)
10. Changes
This policy may be updated. In case of significant changes, you will be notified by email at least 30 days before the change takes effect.
11. Contact
For any question about your personal data: hello@retainapp.io