Privacy Policy
Supravantis ("we", "us") runs supravantis.com and the Supravantis app, including Vantis, our AI chief of staff. This policy explains what we collect, why, and how you control it. We do not sell personal data.
What we collect from you
- Account details: your name, email, brand name and an encrypted password.
- Brand material you give us: your website address, the Brand Study we build from it, and files you upload (product photos, characters, videos).
- Voice sessions: when you talk to Vantis, audio is processed in real time by our voice provider to run the conversation. We record how long each session lasts so we can apply your plan's talk-time allowance.
- Billing: payments are handled by Stripe (or by Shopify if you subscribe through the Shopify App Store). We never see or store your full card number.
- Your own API keys (for example Kie.ai or Apify) are encrypted before they are stored and are never shown again.
Data from stores you connect
If you connect a Shopify store (and, when available, Amazon Seller or Amazon Ads), we use read-only access to produce your store numbers: sales, orders, average order value, sessions and conversion, best-selling products, traffic sources, and counts of new versus returning customers.
- We store only store-level totals (for example "yesterday: 7 orders, $533"). We do not store your customers' names, emails, phone numbers or addresses. Shopify's reporting tools require apps to be granted access to those fields, but Supravantis does not read them into our systems or keep them.
- We use this data only to show you your numbers and to let Vantis advise you on growing your store. We never contact your customers, market to them, or share their data.
- Access tokens for connected stores are encrypted at rest and expire and renew automatically.
Who processes data for us
Cloudflare (hosting, database and file storage), ElevenLabs (Vantis's voice), Stripe (payments), Kie.ai and Apify (only when you add your own keys), and Shopify and Amazon (only for stores you connect). Each receives only what it needs to provide its service.
How long we keep data
- Store numbers are replaced on every refresh and deleted as soon as you disconnect a store, uninstall our Shopify app, or Shopify tells us a store has closed.
- Account and brand data are kept while your account is open and deleted within 30 days of a deletion request.
- Database backups roll off automatically within 30 days.
How we protect it
All traffic is encrypted in transit (HTTPS). Stored keys and tokens are additionally encrypted (AES-256-GCM). Access to production systems is limited to the account owner, protected by strong passwords and two-factor authentication, and access is logged. Testing uses mock data and separate test stores, never real customer data. We keep a written incident response plan; if a breach affects your data we will notify you and, where required, the relevant platform and authorities without undue delay.
Your choices and rights
You can disconnect any store at any time from My Store, export or correct your data, or ask us to delete your account by emailing hello@supravantis.com. Depending on where you live (for example California or the EU/UK) you may have additional rights to access, correct, delete or port your data, and to object to processing. We honor these requests within 30 days. We do not make automated decisions with legal or similarly significant effects about anyone.
Children
Supravantis is a business tool for adults and is not directed to anyone under 18.
Changes
If we change this policy in a meaningful way we will update the date above and tell account holders by email.