Privacy Policy

BellRelay turns events from services you connect into timely business notifications.

Effective: July 27, 2026

Data we process

When a merchant connects Shopify or another provider, BellRelay can process provider and order identifiers, transaction amounts, currencies, timestamps, event details, customer names, and customer email addresses. We also process workspace, user, device, configuration, delivery, and security records needed to operate the service.

How we use data

We use this data to receive, normalize, display, aggregate, and retain notifications for the merchant; maintain reliable delivery; provide support; prevent abuse; and comply with legal and platform obligations. We do not sell personal information or use connected-service data for third-party advertising.

Storage and security

Network traffic is encrypted in transit. Provider credentials, raw webhook receipts, normalized customer fields, and generated privacy exports are encrypted with separated application keys. Production access is restricted and security-sensitive access is audited without copying customer values into audit records.

Retention

Raw encrypted webhook bodies are retained for up to 30 days; direct customer name and email for up to 90 days; detailed provider identifiers and event details for up to 365 days; generated privacy exports for up to 30 days after completion; and payload-free privacy and security audit evidence for up to 24 months. Anonymous transaction totals and counts can remain for the merchant workspace until workspace deletion or another applicable deletion obligation. A verified deletion request takes precedence.

Service providers and disclosures

We may use infrastructure, delivery, monitoring, and support providers to operate BellRelay. They may process data only to provide those services. We may also disclose data when legally required, to protect the service, or as part of a business transaction subject to appropriate safeguards.

Your choices and rights

Merchants can disconnect integrations and request access, correction, or deletion through support. Shopify privacy requests are also accepted through Shopify's mandatory compliance process. Rights and response periods vary by jurisdiction.

Contact