Privacy notice
In short
- The cmre.io website sets no cookies and runs no analytics or advertising trackers.
- If you request a demo, we keep what you type only to reply to you. No newsletter, and we never sell it.
- When a store uses CMRE, the store owns its data. We process it only to run the service for that store.
- You can ask us to show, correct or delete your information at contact@cloudonesoftware.com.
Who we are
CMRE (the Marketing Revenue Engine) is provided by CloudOneSoftware LLC, Jersey City, New Jersey, USA ("we", "us"). This notice covers the cmre.io website, the demo-request form, and the CMRE app at cmre.io/app. Questions go to contact@cloudonesoftware.com.
What we collect, and why
| Where | What | Why |
|---|---|---|
| Visiting cmre.io | Standard request logs kept by our hosting provider: IP address, browser type, page requested, time. | Keeping the site secure and working. We don't use them to profile you. |
| Demo or pricing request | Name, work email, company, store address, order volume, role, and any message you write. | Replying to your request and preparing a demo or quote. |
| CMRE account | Email address and password (stored only as a secure hash), your role, and activity in your workspace. | Signing you in, applying team permissions, and keeping an activity record. |
| Store data a merchant connects | Orders, products, stock levels, customer IDs and tags, discount codes, and how shoppers arrived (tracked links). | Running CMRE for that store: weekly focus, scorecards, tiers, offers and stock checks. |
| Storefront events (if the store turns them on) | A daily count of store visits, product views, add-to-carts, checkouts and orders. No visitor identifiers, IP addresses, devices or cart contents are stored. | Showing where shoppers drop off. |
| Content and channels | Posts, articles, approvals, and results reported by connected social channels. | Scheduling approved content and measuring which channels sell. |
| Surveys and wholesale enquiries | Scores and comments from a store's customers; contact details from businesses that ask about wholesale. | Letting the store follow up. These belong to the store. |
Store owners and their customers
When a merchant connects a store, the merchant decides what CMRE does with its customers' data, and we act as a service provider (a "processor") on the merchant's behalf. Shoppers with questions about their data should contact the store first; we help stores answer those requests. CMRE changes a store only after a person in that store's team approves it: customer tags, discounts, customer segments, marketing report entries, bundle products and VIP gift cards. For gift cards, only the last four characters of each code are kept. Marketing segments built by CMRE include only customers who agreed to email marketing. When a store asks for a customer's data to be shown or erased, or removes CMRE, CMRE acts on the request automatically after checking it came from the store's platform.
Cookies
The public website uses no cookies. The CMRE app stores a sign-in session in your browser so you stay signed in; it's needed for the app to work and isn't used for tracking.
Who else handles data
We use these providers to run CMRE. Each receives only what it needs:
- Cloudflare: hosting, security and request logs.
- Supabase: database and sign-in.
- Shopify: the merchant's own store, which CMRE reads and updates with permission.
- Zernio: scheduling and publishing to social channels the store connects.
- Anthropic: drafting help, only if a workspace owner turns on the optional AI writer.
We don't sell personal information or share it for cross-site advertising.
How long we keep it
- Demo requests: until we've answered and the conversation has ended, and no longer than 24 months.
- Account and store data: for as long as the workspace is active. When a merchant closes a workspace, its data is deleted within 30 days, except where the law requires us to keep records.
- Hosting request logs: as set by our hosting provider, typically a few days.
How we protect it
All traffic uses HTTPS. Each workspace is sealed off at the database level, so one store's team can't see another's data. Store and channel keys are encrypted and never shown in the browser after they're saved. Access inside a workspace follows roles (owner, CMO, and others).
Your choices and rights
Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, or object to how it's used. Residents of California and other US states with privacy laws, and of the UK and EU, can use these rights by emailing contact@cloudonesoftware.com. We'll confirm who you are and reply within the time the law sets. We won't treat you differently for asking.
Children
CMRE is a business tool and isn't meant for anyone under 16. We don't knowingly collect children's information.
International transfers
CMRE is run from the United States, and our providers may process data in other countries. Where the law requires it, we rely on contractual safeguards for those transfers.
Changes
If we change this notice, we'll update the date at the top. Significant changes will also be shown in the app.