Privacy Policy
Last updated 2 August 2026.
This covers nuvv.app (Nuvv Research). The Nuvv product at app.nuvv.app is governed by its own terms and privacy policy.
What we collect
Your email address, if you give it to us to receive a category brief or to order an audit. That is the only personal information we ask for.
Your store domain, if you give it to us for an audit or a sample measurement. A domain is business information, not personal information, but we treat it as confidential to you.
Payment details are never collected by us. Audit payments are processed by Stripe. We receive confirmation that a payment succeeded and the email address associated with it; we never see or store your card details.
Basic traffic data - pages requested and referring site, which we use to understand which reports get read.
Our web server also keeps standard access logs, which include the IP address of each request. We keep those for 14 days and use them only to detect bots, abuse and malicious traffic. They are not used to build a profile of you, not combined with your email address, and not shared.
What we do with it
- Send you the brief, report or audit you asked for.
- Tell you when a new report or a re-run of your audit is available.
- Nothing else. We do not sell, rent, or share your email address, and we do not provide it to third parties for their own marketing.
Every email we send has an unsubscribe link, and your mail client's own one-click unsubscribe works too. Unsubscribing stops all of it - briefs, new-report notices, everything. The one exception is an audit you have already paid for: we will still deliver that, because you bought it. Reply to that email if you would rather we did not.
Data we publish
Nuvv Research publishes derived aggregates - medians, indices, cohort movements - computed across large populations of storefronts. Published figures never identify an individual merchant, and we do not redistribute raw underlying records.
Storefront data
Our research draws on publicly available storefront information - the same pages and public product endpoints any shopper or search engine can request. We do not attempt to access private, authenticated, or non-public data.
We crawl at a deliberately low rate, and when a store or its provider signals that we are asking for too much - an HTTP 429 or a challenge - we stop and back off for hours before that store is eligible again, resting the address we were requesting from. A store that keeps refusing is left alone rather than retried harder.
If you operate a store and would prefer it excluded from our crawling, email research@nuvv.app with the domain and we will exclude it.
How long we keep things
Email addresses are kept until you unsubscribe or ask for deletion. Audit inputs and outputs are kept for 24 months so re-runs and comparisons are possible, then deleted.
Your rights
Email research@nuvv.app to get a copy of what we hold about you, correct it, or have it deleted. We will action deletion requests within 30 days and we do not require a reason.
If you are in the UK, EU, or a US state with comparable legislation, you have statutory rights over your personal data; the address above is how to exercise them.
Cookies
We do not use advertising or cross-site tracking cookies. Any cookie set is either strictly necessary to make a page work, or first-party analytics that tell us which reports get read. We do not use them to build a profile of you, and we do not share them.
Changes
If this policy changes materially we will update the date above and, where the change affects how we use information you have already given us, tell you by email.
Contact
research@nuvv.app