Privacy Policy

Account data: name, email, and workspace details you provide at sign-up (via our auth provider, Clerk).

Store + knowledge data: when you connect a store (e.g. Shopify) or add knowledge sources, we process the order, product, and policy data needed to resolve tickets. Connector credentials are encrypted at rest (AES-256-GCM).

Support conversations: messages between your customers and the agent, and the actions the agent takes, so it can resolve and so you can audit it.

Usage + billing: resolution counts and product usage; payment is handled by Paddle (our Merchant of Record) - we never store card numbers.

To provide and improve the service: ground the agent in your knowledge, take the actions you authorize, meter billing, prevent abuse, and provide support. We do not sell your data, and we do not use your customers' conversations to train shared models.

We use trusted infrastructure providers to run the service: Vercel (hosting), Neon (database), Clerk (authentication), DeepSeek (LLM inference, Western-hosted), and Paddle (billing). Each processes data only as needed to provide its function.

Every tenant's data is isolated at the database level (row-level security). Credentials are encrypted; actions are logged to an immutable audit trail. Access is least-privilege.

We retain account and conversation data for as long as your workspace is active, and delete or anonymize it on request or after account closure, subject to legal and accounting requirements.

You can access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, email privacy@resolvohq.com. We act as a processor for your customers' data; end-customers should contact the merchant they interacted with.

We use essential cookies for authentication and privacy-friendly analytics to understand aggregate usage. We do not use third-party advertising cookies.

We may update this policy; material changes will be posted here with a new date. Questions? privacy@resolvohq.com.