Acuvizon AI privacy policy

This Privacy Policy explains how Rim Zim Labs Inc., a Delaware corporation ("Rim Zim Labs," "Company," "we," "us," or "our"), owns and operates the Acuvizon AI demand forecasting and inventory planning platform ("Acuvizon" or the "Service"), and how we collect, use, store, and protect information when you visit our website at acuvizon.ai (the "Site") or use the Service at app.acuvizon.ai.

Acuvizon provides AI-powered demand forecasting and inventory planning for ecommerce merchants. To do this, the Service connects to sales channels you authorize — currently Shopify, with Amazon marketplace integration in development — and analyzes your store's sales, inventory, and order history to generate forecasts and reorder recommendations.

If you have questions about this policy, contact us at privacy@acuvizon.ai.

1. Who this policy covers

This policy applies to:

• Visitors to acuvizon.ai
• Merchants and their authorized staff who use the Service

Acuvizon is a business-to-business (B2B) tool. We do not knowingly collect information from individual consumers who shop on our merchants' stores, except to the limited extent that order-level data (e.g., quantities, SKUs, order dates) passes through our systems as part of generating forecasts, as described in Section 3.

2. Information we collect directly from you

When you create an account, contact us, or use the Service, we may collect:

• Name, business name, email address, identity-provider user identifier, and profile image (if provided)
• Passwords entered in the Service's sign-in and sign-up forms are handled by our third-party identity provider; Acuvizon does not store them in its application database
• E-commerce store details you provide directly (store name, store URL/domain, connected platform(s) such as Shopify or Amazon, and plan/subscription tier)
• Billing information, where a paid subscription is offered (processed by the applicable payment provider — we do not store full payment card numbers)
• Support and correspondence you send us
• Questions and conversation history when you use Copilot, together with application context and the business data used to answer them
• Basic usage and device information (IP address, browser type, pages visited) via standard web analytics
• Supplier and purchasing data you provide, imported, or connect to the Service — for example, supplier names, contact details, lead times, minimum order quantities, and unit costs — used to calculate reorder points and purchasing recommendations. Where this data includes contact information for a supplier's personnel, you confirm you have the right to share it with us for this purpose.

3. Information we collect from connected sales channels

When you authorize Acuvizon to connect to a sales channel, we use connected-channel data to generate demand forecasts and inventory recommendations. We also keep the records received from connected platforms, reduced to the fields we use, so they can be reprocessed. (The data described in this section, together with the supplier and purchasing information described in Section 2, is referred to as "Customer Data" in our Terms of Service.) Specifically:

From Shopify: product and variant data (SKU, title, price), order line items (quantity, date, SKU), inventory levels, and the fulfillment location/warehouse assigned to each order (a location identifier, not the customer's address), via the Shopify API under the scopes you approve at connection time.

From Amazon (Selling Partner API), once available: order and sales history by SKU/ASIN, unit quantities and dates, inventory levels (fulfillable, inbound, reserved), and the fulfillment center/warehouse associated with each order, via SP-API roles limited to inventory and order tracking data.

We use warehouse/fulfillment-location data to forecast and plan inventory separately by location for merchants with multiple warehouses. This is business/operational data about where inventory is held and orders are fulfilled from — it does not require, and we do not collect, the end customer's shipping address.

From an optional ERP, accounting, or point-of-sale connector you enable: if you connect an ERP, accounting, or point-of-sale system to the Service as an optional add-on, we exchange data with that system only as needed to provide the connector's functionality, under the access you authorize at connection time. We do not use that data for any purpose beyond providing the connector to you.

We deliberately do not request, and do not need, the following to provide our Service:

• End-customer personally identifiable information (names, shipping and billing addresses, emails, phone numbers)
• Payment card or financial account details
• Buyer-seller messages or other buyer communication content
• Buyer feedback solicitations, product reviews, or ratings content
• Any SP-API role or Shopify scope broader than what forecasting requires

Orders received from Shopify include shopper names, addresses, emails and phone numbers. We remove these fields before an order is saved, so they are never stored.

Amazon data is used only for your benefit. Data we access from your Amazon seller account through the Selling Partner API is used solely to generate forecasts and recommendations for your account. We do not aggregate, pool, or otherwise use your Amazon data to develop, train, or improve models, benchmarks, or features for the benefit of any other merchant, and we do not use it for any purpose beyond providing the Service to you. Acuvizon applies the same forecasting methodology across all merchants using the Service; this shared methodology is run independently on each merchant's own data, and no merchant's Amazon or Shopify data is used to train, fit, or inform outputs generated for any other merchant.

4. How we use information

We use the information described above to:

• Generate demand forecasts and reorder/inventory recommendations, including using supplier lead times and order quantities to calculate when and how much to reorder
• Detect and account for stockouts so they are not mistaken for genuine demand drops
• Operate, maintain, and improve the Service, subject to the limits on Customer Data use in Section 3 and Section 5 of the Terms of Service
• Communicate with you about your account, support requests, and product updates
• Comply with legal obligations

We do not sell your data, and we do not use your store's sales data to build products for, or share it with, your competitors. We do not use connected-channel data for advertising or marketing purposes unrelated to the Service.

5. How we store and protect information

The Service uses authenticated access and workspace membership controls to restrict access to Customer Data. Connected-platform OAuth access and refresh tokens are encrypted before they are stored in the application database. We use HTTPS for connections to external services.

The Service is hosted on cloud application-hosting and database infrastructure providers. Acuvizon does not separately hold its own SOC 2 or ISO certification at this time. Information about our infrastructure providers and their security controls is available on request, including as part of a security or vendor review.

If we experience a security incident affecting your data, we will notify you as required by applicable law. Where the incident involves data obtained through Amazon's Selling Partner API, Amazon's Data Protection Policy separately requires us to notify Amazon within 24 hours of detecting or suspecting a security incident, and restricts how we communicate about the incident on Amazon's behalf. Other third-party platforms or connectors we integrate with — including ERP, accounting, or point-of-sale systems — may impose their own similar requirements, which we comply with as applicable. In each case, these platform-facing requirements govern only our communications made to that platform; they do not limit our own, independent obligation to notify you, as our customer, of an incident affecting your data as required by applicable law.

6. Data retention and deletion

We retain connected-channel data for as long as your account is active and a channel remains connected, so that forecasts stay current.

If you disconnect a sales channel or close your Acuvizon account, we will delete the associated channel data within 30 days, except where we are required to retain it longer for legal, tax, or dispute-resolution purposes. For data obtained through Amazon's Selling Partner API specifically, we delete it within 30 days of the earliest of: your revocation of authorization, Amazon's request, our loss of access rights, or termination of the applicable service — consistent with Amazon's data protection requirements. For data obtained through Shopify's API, we delete the associated data within 30 days of uninstallation or an enforceable deletion request, as applicable. Shopify's subsequent deletion webhook does not extend the deadline measured from uninstallation. Deletion means genuine, permanent removal; masking, hashing, or otherwise de-identifying data in place is not treated as a substitute for deletion.

You may request deletion of your data at any time by contacting privacy@acuvizon.ai.

7. Third parties and sub-processors

We share information only with service providers who help us operate the Service (for example, cloud hosting, database, and analytics providers), under contractual obligations to protect it and use it solely to provide services to us. We do not sell or rent your information to third parties.

Depending on the features you use, these service providers include:

• Cloud hosting and database providers: run the Service and store account information, connected-channel records, supplier and purchasing data, uploaded files, forecasting data, Copilot conversations and operational logs.
• An identity provider: account sign-in, password authentication and session management.
• An AI model provider: the Copilot assistant. To answer your questions, Copilot sends your question, conversation history, selected application context, and relevant business data to the provider. This may include product, sales, inventory, supplier, purchasing and forecast information. Forecasting itself does not use the AI model provider.
• An email provider: transactional and support email, including recipients' addresses and message content, and website beta applications sent to our team.
• A web analytics provider: browsing and device information used to understand Site usage.
• A bot-protection provider: checks on public forms, including verification information and the submitter's IP address.
• An error-monitoring provider: error diagnostics.
• A team messaging provider: alerts and Copilot questions in a channel you connect, and operational alerts to our team.

We may add or change service providers as the Service evolves. A current list of the providers used for your account is available on request at privacy@acuvizon.ai, including as part of a customer security or vendor review.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact privacy@acuvizon.ai. We will respond within the timeframe required by applicable law.

Depending on your location, you may have additional rights under applicable data protection laws, such as the GDPR, UK GDPR, or CCPA/CPRA. To exercise any such rights, contact privacy@acuvizon.ai.

9. International data transfers

Our application hosting is configured in the United States. Our service providers may process information in other locations. If you access or use the Service from outside the United States, your information — including connected-channel data, account information, and supplier or purchasing data you provide — may be transferred to countries with data protection laws that differ from those of your country.

The Service is designed and marketed primarily for merchants located in the United States. Users may access the Service from other locations.

10. Cookies

The Site and the Service use cookies and similar technologies, including:

• Essential cookies required for the Site and Service to function, such as authentication and session management.
• Analytics cookies used by our web analytics provider to help us understand how visitors use the Site so we can improve it.
• Preference cookies that remember choices you've made, such as display settings.

We do not use cookies for third-party advertising or ad targeting. Most browsers let you block or delete cookies through their settings; disabling essential cookies may affect the Site's or Service's functionality.

11. Children's privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and, for material changes, provide additional notice (such as email) where appropriate.

13. Contact us

Rim Zim Labs Inc.

Operator of Acuvizon AI (acuvizon.ai)

A Delaware corporation

privacy@acuvizon.ai