Privacy Policy

This policy explains what data SHŌ collects when you use the application at sho.gi (the "Service"), why we collect it, who it's shared with, and the choices you have about it.

Account data — your name, email address, and organization details, collected when you sign up, via our authentication provider, Clerk. If you arrive through a tagged link (for example from a client's progress page), we also note which link, so we can see what is working. This is only the link's label, never anything about the person who sent it.

Data you enter — deals, contacts, checklist progress, notes, goals, and anything else you or your team add while using the Service, including any lead information collected via industry-specific features (for example, event-sourced leads).

Merchant link data — information entered by people you share a merchant link with, who are not themselves SHŌ account holders. You are responsible for having a lawful basis to collect and share that information through the Service.

Billing data — if you subscribe, our payment processor, Stripe, collects and stores your payment details directly. We never see or store your full card number.

Technical data — basic request and error information (such as timestamps, URLs, and error messages) used to keep the Service reliable, collected automatically by our hosting provider, Vercel.

• To provide and operate the Service, including your organization's deals, contacts, and merchant links;
• To process subscription payments and manage billing;
• To secure accounts and detect, investigate, and prevent abuse;
• To diagnose and fix errors in the Service;
• To communicate with you about your account, such as billing or trial-related notices.

We don't sell your data, and we don't use it to serve third-party advertising.

We share data only with the service providers ("subprocessors") that help us run SHŌ:

• Clerk — authentication and account management;
• Stripe — subscription billing and payment processing;
• Vercel — application hosting and infrastructure;
• Our database hosting provider — stores the data described in Section 2.

Each of these providers only processes data as needed to perform their function for us, under their own privacy and security commitments. We don't share your data with anyone else except where required by law.

The Service uses essential cookies set by our authentication provider, Clerk, to keep you signed in. We don't use advertising or cross-site tracking cookies.

We keep your account and organization data for as long as your account is active. If you close your account, we delete or anonymize your data within a reasonable period, except where we're required to keep billing records for legal or tax purposes.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact support@sho.gi.

Our service providers may process data outside your own country. Where that happens, we rely on those providers' own safeguards (such as standard contractual clauses) for the transfer.

The Service is intended for business use and is not directed at, or knowingly used by, children.

We may update this policy from time to time. If we make material changes, we'll make reasonable efforts to let you know before they take effect.

Questions about this policy or your data can be sent to support@sho.gi.