This Privacy Policy explains how Allyvia, Inc. ("Allyvia," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with our websites, POS and business management platform, and related services (the "Service"). It also describes the privacy rights available to California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA/CPRA").
We handle personal information in two capacities. When we collect information about visitors to our websites, prospects, and the personnel of our business customers, we act as a business/controller. When our business customers (merchants) use the Service to process information about their customers and staff, we act as a service provider/processor and handle that information on the merchant's behalf and instructions. If you are a shopper or employee of a business that uses Allyvia, please direct privacy requests to that business; we will assist them as required.
We collect the following categories of personal information:
We use personal information to:
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only as follows:
Merchant business data is logically isolated per tenant and is not disclosed to other merchants.
Payments taken through the Service are processed by third-party processors, including Stripe and Square. Payment card numbers are transmitted directly to the processor through a tokenized, PCI-scoped abstraction; Allyvia does not store full card numbers. The processors handle card data as independent controllers under their own privacy policies and PCI DSS obligations.
To provide predictive features, our models are trained and tuned on a merchant's own data to produce recommendations for that merchant. We may also use aggregated and de-identified data — from which individuals and, where applicable, individual businesses cannot reasonably be re-identified — to develop, evaluate, and improve our models and the Service. We do not use one merchant's identifiable business data to make recommendations for a different merchant. Recommendations are informational and do not constitute professional advice.
Our websites and app use cookies and similar technologies for essential functionality, to remember preferences, and to understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where we use analytics, we do so to measure and improve the Service, not to sell your information.
We retain personal information for as long as needed to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Merchant business data is retained for the life of the account; after termination we make it available for export for a limited period and then delete or de-identify it, unless retention is required by law. We retain de-identified and aggregated data without time limit.
We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, role-based access controls, tenant isolation, authentication safeguards, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and configuring access appropriately.
If you are a California resident, you have the following rights with respect to personal information we hold about you as a business/controller, subject to verification and legal exceptions:
To exercise these rights, email nigelfernando@allyvia.co. We will verify your request using information associated with your account. You may use an authorized agent to submit a request on your behalf with proof of authorization. If you are a shopper or employee of a business that uses Allyvia, submit your request to that business, and we will support them as a service provider.
Categories collected, disclosed, sold, or shared (last 12 months):
| Category | Collected | Disclosed for a business purpose | Sold / shared |
|---|---|---|---|
| Identifiers (name, email, phone, IP) | Yes | Service providers, integrations you enable | No |
| Commercial information (transactions, subscriptions) | Yes | Payment and accounting providers | No |
| Internet/network activity (usage, log data) | Yes | Hosting and analytics providers | No |
| Professional information (business, role) | Yes | Service providers | No |
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, if changes are material, provide additional notice by email or in-product. Your continued use of the Service after changes take effect constitutes acceptance.
For privacy questions or to exercise your rights, contact Allyvia, Inc. at nigelfernando@allyvia.co.
← Back to home
Allyvia