Privacy Policy

Solvative (“we,” “us,” or “our”) operates the Connect Clutch Klaviyo Integration a middleware service that automatically syncs customer loyalty data from Clutch to Klaviyo so brands can send personalized, data-driven email and SMS campaigns.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have over it. Please read it carefully. If you have questions, visit solvative.com to get in touch.

This is a business-to-business (B2B) service. Our customers are brands and merchants, not individual consumers. Where this policy refers to “you,” it means the business entity using the Service and the individuals acting on its behalf.

2.1 Information You Provide Directly

• Account and contact details: Your name, business email address, and company name when you sign up, request a demo, or contact us.
• Integration credentials: API keys and tokens for your Clutch and Klaviyo accounts that you provide to configure the sync. These are stored encrypted and used only to operate the integration on your behalf.
• Support messages: Any messages or attachments you send to our support team.

2.2 Your Customers' Loyalty Data (Processed on Your Behalf)

When the integration is active, we act as a data processor for your business. This means we handle your customers' data strictly on your instructions, we do not own it, use it for our own purposes, or share it beyond what is needed to run the sync. As the merchant, you remain the data controller responsible for having a valid legal basis to share your customers' data with us.

We transmit the following categories of loyalty data from Clutch to Klaviyo:

• Customer identifiers (email address, loyalty member ID)
• Points balances, tier levels, and reward redemption history
• Enrollment dates and loyalty program activity timestamps
• Opt-in / opt-out preferences relevant to loyalty communications

This customer data is not stored in our systems. It passes through our infrastructure only long enough to complete each sync and is not retained afterwards. Operational logs (see Section 2.3) record that a sync occurred and whether it succeeded but do not contain personal customer data.

2.3 Technical and Operational Data

• Log data: IP addresses, browser type, pages visited, and timestamps on our website.
• Sync operation logs: Records of how many events were processed, success or failure status, and latency. These logs do not contain your customers' personal information only counts and status codes.
• Cookies: See Section 6.

• To run and maintain the Clutch-to-Klaviyo sync on your behalf.
• To authenticate your API connections and validate sync configurations.
• To send you transactional messages about sync status, errors, or outages.
• To respond to your support requests.
• To send marketing updates about the product only with your explicit consent, and you can opt out at any time.
• To monitor and improve the reliability and performance of the Service using anonymized operational data.
• To comply with legal obligations.

If you are based in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases (GDPR):

• Contract performance: To deliver the integration service you have engaged us for.
• Legitimate interests: To prevent fraud, maintain security, and improve the Service where those interests are not overridden by your rights.
• Consent: For optional marketing communications only. You may withdraw consent at any time by contacting us or clicking unsubscribe.
• Legal obligation: Where applicable law requires us to process or retain certain data.

We do not sell, rent, or trade your information. We share data only in these limited circumstances:

• Service providers: We use third-party companies to help us operate the Service (for example, cloud hosting and infrastructure providers). These providers process data on our behalf under confidentiality obligations and are not permitted to use your data for their own purposes. A list of our current service providers is available on request.
• Clutch and Klaviyo platforms: Data is transmitted between these two platforms solely as instructed by you. Each platform's own privacy policy governs how they handle that data once received.
• Legal requirements: When disclosure is required by law, regulation, or a valid legal process such as a court order or subpoena.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.

Our website uses the following types of cookies:

• Strictly necessary: Required for the website to function (e.g., session management). No consent required.
• Analytics: Used to measure how visitors interact with our site (e.g., page views, traffic sources) using anonymized data. These cookies are only set after you provide consent via the cookie banner on your first visit.
• Preference: Remember your settings across sessions. Only used where you have accepted them.

You can withdraw cookie consent at any time by adjusting your browser settings or clearing cookies. Disabling analytics or preference cookies will not prevent you from using the website.

We retain different types of data for different periods:

• Account information (name, email, company): Retained while your account is active, and deleted within 30 days of account closure unless we are required by law to keep it longer.
• Your customers' loyalty data: Not retained. It is transmitted through our infrastructure transiently and is not stored after the sync completes.
• Sync operation logs (event counts, error codes no personal data): Retained for up to 90 days for debugging and reliability purposes, then deleted.
• Website log data (IP addresses, page visits): Retained for up to 90 days, then deleted or anonymized.

We take the security of your information seriously. Our measures include:

• Encryption of API credentials at rest (AES-256) and in transit (TLS 1.2 or higher).
• Role-based access controls only authorized personnel can access production systems.
• Regular security reviews and third-party dependency audits.
• Documented incident response procedures.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law within 72 hours where GDPR applies and will work with you to minimize any impact.

Depending on where you are located, you may have the following rights over your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Ask us to delete your personal data (the “right to be forgotten”), subject to legal retention requirements.
• Portability: Receive the personal data you have provided to us in a structured, commonly used, machine-readable format.
• Objection or restriction: Object to or ask us to restrict certain types of processing, particularly where we rely on legitimate interests.
• Withdraw marketing consent: Opt out of marketing emails at any time by clicking unsubscribe or contacting us.

To exercise any of these rights, please visit solvative.com and get in touch. We will respond within one calendar month.

If you are in the EEA or UK and believe we are processing your data unlawfully, you have the right to lodge a complaint with your local Data Protection Authority for example, the ICO in the UK (ico.org.uk) or your relevant EU supervisory authority.

The Service connects specifically to the Clutch loyalty platform and the Klaviyo marketing platform. Your use of those platforms is governed entirely by their own terms of service and privacy policies. We are not responsible for how Clutch or Klaviyo handle data once it has been delivered to them.

We may update this Privacy Policy from time to time. When we make material changes, we will post the revised policy on this page with an updated effective date and, where appropriate, notify you directly by email in advance of the change taking effect. We encourage you to review this page periodically.

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us: