Security and data
Last updated
What Vera reads, what she never does, where your data lives, who processes it, and how to have it deleted.
What Vera reads
- Public pages, before you join: your website, your customer reviews and the ads Meta shows publicly in its Ad Library.
- Your ad account, only after you share it with Merchient, view-only: your ads, spend, review status and landing URLs. How to share it.
What Vera receives on each surface
- Website: your public pages, and nothing else.
- Meta ads: a view-only share of your ad account.
- Email and SMS: a read-only Klaviyo API key that you send to Vera. This surface is coming soon.
- Shopify: an install that you approve in Shopify, with read-only access to your store’s products, pages, inventory and discounts.
- Reviews: the reviews your public pages show and, if you give us one, a review-app key.
- Amazon listing: the link to your listing. This surface is coming soon.
- Label: a photo of your Supplement Facts panel, which you email to Vera.
- Creators’ posts: the scripts and captions you email to Vera.
- The scan form on our home page: the website and work email you type in, once our scan service is on. Until then, the form opens an email to us.
What Vera never does
- Post, edit or pause anything. Vera never posts, edits or pauses anything in your accounts: she reads, and she drafts.
- Spend your money. View-only access cannot create or edit ads, and it gives no control of the ad account’s settings, finances or permissions.
- Log in as you. We never ask for your password. Vera uses only the access you give her: a view-only share, a read-only key or a read-only install.
Where your data lives
- Google Cloud, in the United States: the server Vera runs on, where what you send us is kept encrypted.
- Google Workspace: our email, hello@merchient.com, and the page where you book a call.
- Stripe: payments and billing. We do not store card numbers.
Who processes it
Anthropic processes the content Vera checks, through Claude, the AI model Vera runs on. Google hosts it and runs our email, and Stripe handles payments. Once Vera sends emails herself, a sending service will process them too. Each provider handles data under its own terms, and our privacy policy links them. We never sell your data.
Deleting your data
Email hello@merchient.com with your brand name, and your data is deleted within 30 days. You can also remove Merchient’s access in Meta at any time, and revoke a Klaviyo key, a review-app key or the Shopify install in that service at any time. Removing access stops Merchient reading from it; it does not delete what we already hold. The data deletion page has the steps.
Contact
hello@merchient.com
Orbline LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA