Privacy Policy

1. Who we are

CommerceBase operates under The Realry Group and functions as a data controller for advertiser accounts and processor for end-user behavioral data via its pixel technology.

2. Data we collect

The platform collects several data categories:

• Advertiser account information including name, business email, and billing details
• Product catalog data connected through Shopify, Google Merchant Center, or uploads
• Campaign performance metrics and spend telemetry from various channels
• Pixel events (page views, add-to-cart, purchases) using pseudonymous identifiers only

3. How we use data

Data supports platform operations, conversion forwarding to advertising networks, model improvement through aggregated analysis, and regulatory compliance.

4. Legal bases (GDPR)

The company relies on contract performance, legitimate business interests, and user consent for cookie-based analytics on its marketing site.

5. Sharing

Data flows to infrastructure partners including AWS, MongoDB Atlas, Cloudflare, Stripe, Google, and DailyClicks. A complete sub-processor list is available upon request.

6. Retention

Advertiser data persists for seven years post-termination. Pixel events remain for 24 months before aggregation; click identifiers delete after 90 days.

7. Your rights

Users may request access, correction, deletion, or export by contacting privacy@realry.com, subject to applicable data protection laws.

8. International transfers

Infrastructure spans US and EU locations. EEA data transfers use Standard Contractual Clauses with processors.

9. Security

Payment data remains tokenized through Stripe. OAuth tokens are encrypted. Production access requires employee authentication and multi-factor verification.

10. Children

Services target business users aged 18+. The platform does not intentionally collect minor information.

11. Changes

Material policy modifications receive 30-day notice via email or in-product announcement.

12. Contact

Data Protection Officer: privacy@realry.com. EU/UK residents may escalate concerns to their respective supervisory authorities.