Privacy Policy

This policy explains what personal data Ralfi processes, why, and what rights you have. It applies to the Ralfi website, the store dashboard and the chat assistant installed on stores.

Who we are and roles

For merchant account data, Ralfi is the controller. For each store's customer data (chats, orders, bookings), the store is the controller and Ralfi acts as processor, handling that data only on the store's instructions.

What data we process

• Merchants: name, email, store details, settings and dashboard usage logs.
• Store customers: messages exchanged with the assistant, name, email or phone when provided, orders, bookings and, on Instagram and WhatsApp, the profile name and photo made available by the platform.
• Contact: the data you send through the contact form.

How we use data

• To provide the service: answering customers and managing carts, orders, payments and bookings.
• Security, abuse prevention and legal compliance.
• Replying to requests sent through the contact form.

We don't sell personal data. Conversations are not used for advertising.

Service providers

We use these providers, which process data on our behalf and only to deliver the service:

• Supabase: database, user accounts and product images, hosted in the European Union (Ireland).
• Cloudflare: hosting and delivery of the website, dashboard and assistant.
• Google (Gemini): AI models that write the assistant's replies and read the files you import.
• Stripe: store payments and Ralfi subscriptions.
• Unipile: connections to Instagram, WhatsApp and Google and Outlook calendars.
• Resend: sending account emails, such as invites and password resets.

We require appropriate data-protection safeguards from all of them. Where a provider processes data outside the European Economic Area, the transfer relies on the European Commission's standard contractual clauses or another safeguard under the GDPR.

Retention

We keep data while the store account is active or as long as needed for the purposes above and legal obligations. Stores can delete customer data from the dashboard or by asking us.

Your rights

You have the right to access, rectify, erase, restrict, port and object, and to complain to your data-protection authority. If you're a store's customer, please contact that store first; we help the store respond. For merchant account requests, use the contact page.

Cookies

We use cookies to make the site work and to improve your experience. You choose which ones to allow in the banner, and you can change your choice any time under "Cookie settings" at the bottom of the page.

• Essential: keep the site and sign-in working. Always on.
• Analytics (optional): show us which pages you visit, where you came from, your country and device type, so we can improve the site. We use a random visitor code, not your name or email.
• Marketing (optional): let Google and Meta measure our ads, so we show you more relevant content.

We keep a record of your choice (date, choice, country and a scrambled version of your internet address) as proof of consent.

Virtual assistant

Store assistants are artificial-intelligence systems. If you ask, the assistant says it's a virtual assistant, and you can always ask to speak to a person at the store.

Changes

We may update this policy. The date at the top shows the version in force.