Behavio App Privacy Policy
Effective Date: January 2026 | Last Updated: May 6, 2026
1. Introduction
This Privacy Policy explains how Behavio ("we," "us," or "our") collects, uses, and protects your data when you use our Shopify app. We are committed to protecting your privacy and complying with Israel's Privacy Protection Law (Amendment 13, 2025).
By installing and using our app, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
Behavio
Email: support@behavio.io
3. Data We Collect
3.1 Shop Data (from Shopify)
| Data Type | Purpose | Sensitivity |
|---|---|---|
| Shop domain and name | App functionality and identification | Medium |
| Shop email | Communication and support | Medium |
| Access tokens | API authorization | High |
| Order data (anonymized) | Analytics and purchase prediction | Medium |
3.2 Visitor Behavior Data (from Web Pixel)
| Data Type | Purpose | Retention |
|---|---|---|
| Session identifiers (sessionID, visitorId) | Track visitor journey | 90 days |
| Time on page and scroll depth | Measure engagement | 90 days |
| Click counts | Understand interactions | 90 days |
| Product views, cart actions, wishlist | Purchase intent prediction | 90 days |
| Traffic source (UTM, gclid, fbclid) | Marketing attribution | 90 days |
| Device type, browser, OS | Optimize experience | 90 days |
| IP address (truncated/anonymized) | Fraud prevention, geographic analytics | 90 days |
3.3 What We Do NOT Collect
- Customer names or personal contact information
- Payment or credit card details
- Exact customer locations or addresses
- Sensitive personal data (health, religion, politics)
- Data from children under 16
3.4 How We Collect This Data
We collect personal information directly from the relevant individual, through your Shopify account, and using the following technologies:
- Cookies: data files placed on your device that often include an anonymous unique identifier. For more information about cookies, and how to disable them, visit http://www.allaboutcookies.org.
- Log files: track actions occurring on the storefront and collect data including IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
- Web beacons, tags, and pixels: electronic files used to record information about how visitors browse the storefront. Behavio operates as a Shopify Web Pixel.
4. How We Use Your Data
| Purpose | Description | Legal Basis |
|---|---|---|
| Provide analytics | Real-time visitor statistics and behavior insights | Performance of contract |
| Predict purchase intent | Identify high-intent visitors using machine learning | Legitimate interest |
| Optimize conversions | Help you offer personalized incentives | Legitimate interest |
| Improve our service | Analyze aggregate patterns to enhance functionality | Legitimate interest |
4.1 Automated Decision-Making
Our app uses machine learning algorithms to predict visitor purchase intent. This automated processing:
- Analyzes behavioral patterns (page views, time spent, cart actions)
- Generates purchase probability scores
- Does NOT make decisions that significantly affect individuals
- Can be reviewed or contested by contacting us
5. Data Protection Measures
| Measure | Description |
|---|---|
| Customer ID Hashing | SHA-256 hashing before storage prevents identification |
| Encrypted Transmission | All data transmitted over HTTPS/TLS |
| Access Control | Only authenticated shop owners access their data |
| Data Isolation | Each shop's data is isolated using unique identifiers |
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Session/behavioral data | 90 days |
| Aggregated analytics | 1 year |
| Shop configuration | Until app uninstall + 48 hours |
After the retention period, data is automatically deleted. You can also request immediate deletion at any time.
7. Your Rights
Under Israel's Privacy Protection Law (Amendment 13), you have the following rights:
- Right to Access: Request a copy of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Object: Object to specific data processing
- Right to Data Portability: Receive your data in a structured format
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, contact support@behavio.io. We will respond within 30 days.
7.1 European Residents (GDPR)
If you are a European resident, you have the right to access personal information we hold about you and to request that it be corrected, updated, or deleted. We process your information in order to fulfill the contracts we have with merchants who use the Service, or otherwise to pursue the legitimate business interests described above.
Please note that your information may be transferred outside of Europe, including to the United States, where our infrastructure providers are located. We rely on appropriate safeguards to protect international transfers in accordance with applicable law.
8. GDPR Compliance (Shopify Requirements)
We implement all mandatory Shopify GDPR webhooks:
| Request Type | Our Response |
|---|---|
| Customer Data Request | Export all customer-related data |
| Customer Redaction | Delete all customer data |
| Shop Redaction | Delete all shop data within 48 hours |
9. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Shopify | E-commerce platform | Order data, shop info |
| Render | Cloud infrastructure | All app data (encrypted) |
We do not sell, rent, or share your data with third parties for marketing purposes.
We may also share personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
10. Data Sub-Processors
| Sub-Processor | Location | Purpose |
|---|---|---|
| Render.com | United States | Database and API hosting |
| PostgreSQL (Render) | United States | Data storage |
11. International Data Transfers
Your data may be transferred to servers located in the United States. We ensure appropriate safeguards are in place to protect your information in accordance with applicable law.
12. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related inquiries or to exercise your rights:
Email: support@behavio.io
Response Time: Within 30 days as required by law
Postal address: Hamenofim 9, Herzliya, Israel