Legal

Privacy Policy

Last updated: June 2026

1. Overview

Shelv Space LLC ("Shelv", "we", "us") operates shelv.space. This policy explains what data we collect, how we use it, and what choices you have. We believe in clear, plain-language privacy practices.

2. What we collect

Account data

Name, email address, and password (hashed) when you create an account.

Business data

Store names, contact information, outreach history, product details, and pipeline activity that you add to the platform. This is your data — we store it to provide the Service.

Public profile data

If you enable a public profile, the information you choose to publish (bio, wholesale terms, products, location) is visible to anyone with the link.

Usage data

Basic analytics (page views, feature usage) via Google Analytics to help us improve the product. No personally identifiable data is shared with Google Analytics.

3. How we use your data

To provide, operate, and improve the Service
To send transactional emails (weekly reports, low-stock alerts) that you configure
To power AI features (outreach drafting, store discovery) using third-party AI providers
To respond to support requests
To meet legal obligations

We do not sell your data. We do not use your data for advertising.

4. Third-party services

We use the following third-party services to operate Shelv:

SupabaseDatabase, authentication, and file storage (data is stored in US-West)

VercelHosting and serverless functions (deployed to US regions)

AnthropicAI features: outreach drafting, voice studio (prompts include your business context but not personal data of store contacts)

Google (Gemini / SerpAPI)AI store discovery and search features

ResendTransactional email delivery

SentryError monitoring (does not receive business data)

Google AnalyticsAggregate product analytics (no personally identifiable data)

5. Data retention

We retain your data for as long as your account is active. If you cancel your account, your personal data and business pipeline data (outreach history, products, orders, store notes) are retained for 30 days and then permanently deleted. You can request immediate deletion by emailing us at hello@shelv.space. Public profile data is removed when you disable your profile or delete your account.

Store business information: When you add a retail store to your pipeline, you are typically researching a business that has made its contact details publicly available (on their website, Google Maps, social media, or similar directories). Upon account deletion, we may retain this publicly available business information — store name, address, type, and publicly listed contact details — in an internal store catalog used to improve discovery for all Shelv users. This data is not linked to your account after deletion, contains no personal data, and consists solely of information the business has voluntarily made public.

6. Your rights

You have the right to:

Access the data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of non-essential communications

To exercise any of these rights, email hello@shelv.space.

7. Security

All data is encrypted in transit (TLS) and at rest. Authentication is handled by Supabase Auth with industry-standard password hashing. We conduct regular reviews of our security practices.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify active users by email before material changes take effect. The date at the top of this page reflects the most recent revision.

9. Contact

Privacy questions? Email hello@shelv.space.