Legal

Privacy Policy

What Horavo collects, why, who else touches it, and how to get it back or get it deleted. No dark patterns, no advertising trackers, no selling data.

Effective: 12 October 2026
Version: 1.2
Also see: Terms of Service

The short version.

We collect what an audit tool needs: your account, your billing status, the stores you add, and the results of the audits you run.
We do not sell or share personal information for advertising, and there are no advertising trackers on this site.
The marketing site uses one analytics tool, Microsoft Clarity. In the United States it runs by default and a notice lets you opt out. Everywhere else it runs only if you click Accept; reject, or do nothing, and it never loads.
Audits look at the public pages of your own store. Screenshots and page text are sent to our AI provider to produce the CRO review, and are not used to train anyone’s models.
Delete your account and your data goes with it, within 30 days, backups included within 90.

The full detail is below. This summary is not a substitute for it.

1. Who we are

Oxenbytes, LLC operates Horavo, an automated audit service for Shopify storefronts. For the purposes of data protection law we are the controller of the personal information described in this policy.

390 Northeast 191st Street
#66915
Miami, FL, 33179
United States

Privacy enquiries: privacy@horavo.com

This policy covers the Horavo marketing site, the dashboard, the API and the audit engine. It does not cover third-party sites we link to, or the stores we audit.

2. What we collect

Category	What it includes	Why we have it
Account and profile You, at sign-up	Email address, name, avatar URL if you set one, organisation name, role.	To create and secure your account, and to show who did what in a shared workspace.
Billing You and our payment provider	Plan tier, subscription status, purchase and entitlement records, and the customer id our payment provider assigns you. Card numbers never reach us.	To sell you a plan, enforce plan limits and issue receipts.
Store configuration You, in the dashboard	Store URLs, optional storefront password, schedules, notification preferences, integration endpoints (Slack or webhook URLs) and API keys you create.	To run audits on the stores you add, on the cadence you choose, and to deliver results where you want them.
Audit results Generated by the audit engine	Crawled page URLs and content, screenshots, findings, category scores, task board state, notes and drafts.	They are the product. They are stored so you can compare runs and track progress.
Communications You and our email provider	Emails you send us, support threads, and delivery events for the product emails we send you (delivered, opened, bounced, complained).	To answer you, and to stop emailing addresses that bounce or complain.
Waitlist You, on the waitlist form	Email address, name and plan interest if you give them, plus the exact consent wording you agreed to, the timestamp, and the IP address and browser user agent at sign-up and at confirmation.	To email you at launch, and to keep evidence of double opt-in consent as the law requires.
Technical and log data Automatically, when you use the Service	IP address, user agent, timestamps, request paths and error traces recorded by our hosting providers and application logs.	Security, abuse prevention, debugging and rate limiting. We rely on our legitimate interest in running a service that stays up.
Website usage analytics Your browser, via Microsoft Clarity (section 6)	On the marketing site only. In the United States unless you opt out; everywhere else only with your consent. Pages viewed, clicks, scrolling and mouse movement, session recordings with form inputs masked, device and browser type, approximate location derived from your IP address, and a pseudonymous cookie ID.	To see which pages help visitors and where the site confuses them, so we can improve it. In the US you can opt out at any time; elsewhere it is based on your consent, which you can withdraw at any time.
Cookie consent choice You, in the cookie banner; your country from our CDN	Whether you accepted, rejected or opted out of analytics, or dismissed the US notice, and when, stored in your own browser. Your country, looked up from your IP address once per visit to decide which of those applies; it is kept in your browser for that visit only and not stored by us.	So we follow the rules where you are, do not ask again on every page, and only load analytics where you agreed or did not object.

We do not ask for and do not want special category data: health, biometrics, political opinions and the like. Please do not put such data into store notes, task descriptions or support emails.

3. Data from the stores you audit

An audit fetches publicly reachable pages of the store you submitted and stores their content, structure and screenshots so the checks can run and so you can review findings later.

Those pages are your store’s public content, but they can incidentally contain personal information: a founder’s name on an about page, a support email address, a customer name in a published review. We process that information only to produce your audit, we do not use it for any other purpose, and it is deleted with the audit.

Where you are auditing a store on behalf of a client, you are the controller of that store’s data in your workspace and we act as your processor for it. If you supply a storefront password, it is encrypted at rest and is only decrypted in memory by the crawler at the moment it needs to reach the store.

Horavo crawls only what a normal visitor can reach; it does not attempt to log in to your Shopify admin, does not read customer or order data, and does not bypass protections beyond using a storefront password you provide.

4. How we use it

To provide the Service: run audits, produce findings and scores, keep your task board, send the results where you asked.
To bill you: take payment through our payment provider, apply plan limits, and issue receipts and reminders.
To communicate: transactional email such as audit finished, watch incident, invitation, password reset; and product email you can unsubscribe from.
To keep the Service safe: authentication, rate limiting, abuse detection, fraud prevention, and incident investigation.
To improve the Service: diagnose failures, tune checks and scoring, and compute the aggregated benchmarks described in section 9.
To improve the marketing site: unless you opt out (US) or if you consent (elsewhere), study pseudonymous heatmaps and recordings of how visitors use it (section 6).
To meet legal obligations: tax and accounting records, and responding to lawful requests.

We do not use your data to train AI models, and our AI provider does not train on data sent through its API on our behalf.

5. AI processing

The CRO review, the action plan, fix guidance, content drafts and Ask are produced by a third-party large language model. To generate them we send that provider:

screenshots of sampled pages of the store being audited, downscaled before sending;
extracted text and structural details from those pages;
the findings metadata the deterministic checks produced.

We do not send your account details, your billing information or other customers’ data. The provider processes this under a data processing agreement, acts only on our instructions, and does not use the content to train its models. Ask us at privacy@horavo.com if you need to know which provider we currently use.

Automated processing here produces suggestions for you to review. It does not make decisions that produce legal or similarly significant effects about any individual.

6. Cookies and tracking

This marketing site runs no advertising trackers. Its one analytics tool isMicrosoft Clarity, which shows us heatmaps and recordings of how visitors move through these pages, so we can find what is confusing and fix it. Whether it runs depends on where you are, because the law does:

In the United States: on, with a notice and an opt-out. US privacy laws allow analytics unless you object, so Clarity loads by default and a notice on your first visit tells you it is recording, with an “Opt out” button.
Everywhere else, including the EEA, the UK and Switzerland: off until you opt in. A banner asks first. Clarity’s script is not even downloaded until you click Accept. Rejecting is one click, and ignoring the banner counts as a no.
How we know where you are. Once per visit your browser asks our CDN for your country, derived from your IP address. Only the country code comes back, it stays in your browser for that visit, and we do not store it. If it cannot be determined, you get the opt-in banner. A US notice you dismissed is checked against your country again on each visit, so the same browser outside the US gets the opt-in banner instead.
Change your mind any time via “Cookie settings” in the footer of every page. Rejecting or opting out deletes Clarity’s cookies on this site and stops recording straight away. It does not affect data collected before it.
We ask again after 12 months, and we keep your choice in your browser’s local storage, not in a cookie and not on our servers.
Global Privacy Control is treated as an opt-out wherever you are: if your browser sends it, we do not load Clarity or show the banner, unless you opt in yourself via “Cookie settings”.
What is masked. Text you type into form fields is masked before it leaves your browser and is never recorded. Recordings show page content and how you interacted with it.
No advertising use. We tell Clarity that advertising storage is denied, we do not connect it to any advertising account, and we do not use it to identify you.

When Clarity runs, these cookies may be set:

Cookie	Set by	Purpose	Lifetime
`_clck`	Clarity, on horavo.com	Keeps a pseudonymous Clarity user ID and settings for this site.	1 year
`_clsk`	Clarity, on horavo.com	Joins the pages you view in one visit into a single recording.	1 day
`CLID`	Microsoft, on clarity.ms	Records when Clarity first saw this browser on any site that uses Clarity.	Set by Microsoft
`MUID`, `MR`, `SM`, `ANONCHK`	Microsoft, on clarity.ms and bing.com	Microsoft’s browser identifier and the flags that refresh and synchronise it across Microsoft domains. Microsoft describes MUID as used for advertising, site analytics and operations across its own sites. Clarity does not use it for advertising.	Set by Microsoft

Microsoft keeps Clarity recordings for 30 days. Recordings we mark as favourites, and a random sample Microsoft retains, are kept for up to 9 months. Microsoft also processes Clarity data under its own privacy statement, and its cookie documentation lists the cookies above.

The dashboard uses strictly necessary browser storage only: an authentication token so you stay signed in, and small preference values such as your last-selected store. These are required for the application to work and are not used for tracking or advertising. Clearing them signs you out.

Our hosting providers keep short-lived request logs (including IP addresses) for security and abuse prevention, as any web host does.

The dashboard runs no analytics or session recording at all; the Clarity choices above cover the marketing site only.

7. Categories of recipients

We share personal information only with the categories of service provider we need to run Horavo, each bound by contract to process it solely on our instructions and for no purpose of their own:

Category	What they do for us	Data involved	Location
Cloud infrastructure, database and storage	Host the application, run audits, and store the data they produce, including screenshots	Account and organisation details, stores, audits, findings, screenshots, request logs	United States / global edge
Payment processing	Checkout, billing, invoicing and sales tax. Our provider is the merchant of record for all purchases	Name, email, billing address, tax status, payment method, held by the provider, not by us	United States / European Union
AI model provider	Produces the CRO review, the action plan, fix guidance, content drafts and Ask	Screenshots and extracted text from the storefront being audited, plus finding metadata	United States
Website performance measurement	Runs real Lighthouse performance tests on sampled pages of your store	The public URLs of the pages being measured	United States
Email delivery	Sends transactional and product email: audit finished, watch incidents, invitations, waitlist	Email address, name, message content, delivery events	United States
Website analytics (consent, or opt-out in the US)	Heatmaps and session recordings of the marketing site: in the US unless you opt out, elsewhere only after you accept in the cookie banner	Pages viewed and interactions with them, device and browser details, IP-derived location, a pseudonymous cookie ID. Form inputs are masked	United States / global

Beyond those categories, we may disclose information:

To services you connect. If you configure a Slack integration or a webhook, we send audit events to the endpoint you specified. What happens there is governed by that service and by you.
To people you share with. Team members you invite, and anyone holding a report share link you created, until you revoke it.
For legal reasons. Where we are required by law, or to establish, exercise or defend legal claims, or to protect the rights and safety of users and the public.
In a business transfer. If Horavo is involved in a merger, acquisition or sale of assets, data may transfer as part of it; we will notify you before your information becomes subject to a different privacy policy.

We describe recipients by category rather than by name so that this policy stays accurate when we change provider. If you audit stores on behalf of clients (where you are the controller and we are your processor, as described in section 3) and you need the identity of a specific provider for your own records, email privacy@horavo.com and we will give you the current list.

8. We do not sell your data

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA and under comparable laws in other US states. We have not done so in the preceding twelve months, including for anyone under 16. There is no opt-out to offer because there is nothing to opt out of.

9. Aggregated benchmarks

We compute daily statistics across audited stores (median and percentile category scores, and how often a given check passes) so the product can tell you how your store compares.

These aggregates are built with de-identification as a design constraint:

they contain no store identifier, organisation identifier or URL;
a figure is only computed and only shown when at least 20 stores fall into that cohort, so no single store can be inferred from it;
they are statistics, not records; there is no row that belongs to your store.

We do not publish, sell or share individual audit results, scores or findings. If you would rather your store not be counted in benchmark aggregates at all, email privacy@horavo.com and we will exclude it.

10. How long we keep it

Data	Retention
Account, organisation, stores	While your account exists. Deleted within 30 days of account deletion.
Audits, findings, scores, tasks	While your account exists, so you can compare runs over time. Deleted with the store when you delete it, and with the account when you delete that.
Screenshots in object storage	Deleted with the audit they belong to.
Storefront passwords	Encrypted at rest; deleted when you clear the field or delete the store.
Backups	Deleted data can persist in encrypted backups for up to 90 days before rolling out of the backup window.
Waitlist entries	Until you unsubscribe or we launch and delete the list. Unconfirmed entries expire with their confirmation token after 7 days. Consent evidence for confirmed entries is kept as long as we email you, plus the period we may need it to prove consent.
Email suppression list	Bounced and complained addresses are kept indefinitely; that record exists precisely so we never email the address again.
Webhook delivery logs	The most recent 100 attempts per integration.
Benchmark aggregates	Up to 400 days. They contain no personal or store-identifying data.
Billing and tax records	As long as tax and accounting law requires, typically 7 years.
Marketing site analytics (Clarity)	Recordings 30 days; favourited and sampled recordings up to 9 months. Cookies as listed in section 6.
Cookie consent choice	12 months in your browser, then we ask again. Clear site data to remove it sooner.
Security and request logs	Typically 30 days, longer if needed to investigate a specific incident.

11. Security

All traffic runs over TLS; data is encrypted at rest by our hosting providers.
Storefront passwords are encrypted at rest with a key held outside the database.
Tenant isolation is enforced in the database itself, so one organisation cannot read another’s data even if application code is wrong.
API keys are stored hashed, are scoped to one organisation, and are rate limited.
Report share links use unguessable tokens and can be revoked or expired by you.
Access to production data is limited to those who need it to operate the Service.

No system is perfectly secure. If you believe you have found a vulnerability, please tell us atsecurity@horavo.com before disclosing it publicly; we will work with you and will not pursue good-faith researchers. If a breach affects your personal information, we will notify you and any regulator as the law requires.

12. Your rights (United States)

Depending on your state (California, Colorado, Connecticut, Virginia, Texas, Oregon, Utah and others with comprehensive privacy laws) you have the right to:

Know what personal information we have collected, used and disclosed, and to get a copy of it;
Correct inaccurate personal information;
Delete your personal information;
Portability: receive your data in a portable, machine-readable format;
Opt out of sale, sharing for targeted advertising, or profiling with legal effects. We do none of these, so there is nothing to opt out of;
Opt out of site analytics: the session recording and heatmaps described in section 6, via the notice, “Cookie settings” in the footer, or a Global Privacy Control signal;
Non-discrimination: we will not degrade your service or change your price because you exercised a right.

How to exercise them. Most of this is self-service: export from your dashboard, correct your profile in settings, and delete your account to delete your data. Otherwise email privacy@horavo.com from the address on your account. We respond within 45 days and may extend once by a further 45 days where a request is complex, telling you why.

You may use an authorised agent; we will ask for proof of authorisation and may verify with you directly. If we refuse a request we will explain why, and you may appeal by replying to our decision with “appeal” in the subject. We will decide the appeal within 45 days; if we deny it, you may complain to your state attorney general.

13. Your rights (EEA, UK and Switzerland)

Horavo is operated from the United States and audits stores worldwide, so some of our customers are in Europe. If you are, the GDPR or UK GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting processing already carried out.

Our legal bases for processing are:

Contract: running audits, managing your account, billing you. Without this data there is no service to provide.
Legitimate interests: securing the Service, preventing abuse, debugging, improving checks and computing de-identified benchmarks. We balance these against your rights and you may object at any time.
Consent: marketing email and the waitlist, which uses double opt-in. Every such email carries an unsubscribe link, and withdrawal takes effect immediately. Analytics cookies and session recording on the marketing site, which you can withdraw via “Cookie settings” in the footer.
Legal obligation: tax, accounting and responses to lawful requests.

To exercise any of these, email privacy@horavo.com. We respond within one month. You also have the right to complain to your local supervisory authority, or to the UK Information Commissioner’s Office if you are in the UK, though we would appreciate the chance to put things right first.

14. International transfers

We are based in the United States and our infrastructure is primarily hosted there. If you are outside the United States, using Horavo means your information is transferred to and processed in the United States, whose data protection laws may differ from those in your country.

Where we transfer personal information out of the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with the technical measures described in section 11. Microsoft, which provides the optional site analytics, participates in the EU-US Data Privacy Framework and its UK and Swiss extensions. Ask us at privacy@horavo.com for details of the safeguards that apply to a specific transfer.

15. Children

Horavo is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email privacy@horavo.com and we will delete it.

16. Changes to this policy

We update this policy when what we do with data changes: a new category of recipient, a new feature, a new legal requirement. The effective date and version at the top of this page reflect the current version. For material changes we will notify account holders by email or in the product before the change takes effect.

17. Contact us

Privacy questions, data requests and complaints: privacy@horavo.com

Oxenbytes, LLC
390 Northeast 191st Street
#66915
Miami, FL, 33179
United States