Privacy Policy

Last updated · 28 August 2026

What we collect

Account data you give us: name, email, company details and billing information.

Operational data from the tools you connect: store catalogue, orders, ad performance and payout records. Nallo needs these to operate your business.

• We never collect your customers' payment card numbers — those stay with Stripe.
• We do not sell or rent any data to third parties.
• We do not use your business data to train foundation models.

Why we process it

To operate the businesses you ask us to operate — this is the performance of our contract with you.

To bill you correctly, including the revenue share, which requires reading settled revenue.

To run the nightly health check that verifies your business can still take payments.

To improve the product, using aggregated and anonymised metrics only.

Where it lives

Data is stored in the European Union, on European infrastructure. Backups stay in the EU.

Sub-processors are listed in your dashboard under Settings → Data, with the region of each.

Your rights

Under GDPR you can access, correct, export or delete your data at any time.

• Export: Settings → Data → Export produces a machine-readable archive.
• Deletion: closing your account removes operational data within 30 days.
• Invoices are kept for 10 years where accounting law requires it.

Contact

Data protection questions go to privacy@getnallo.ai. You also have the right to lodge a complaint with your national supervisory authority — in France, the CNIL.