Privacy policy

tmrw (TMRW SRL) builds Klaviyo email automation for Shopify stores. This site (tmrw.ro) is our marketing and audit-request funnel. For anything about this policy or your data, email tudor@tmrw.ro.

When you submit the audit form (/apply): your name, your Shopify store’s URL, your email address, a self-reported monthly revenue bracket, an optional pain point you pick from a short list, and anything you type in the optional notes field.

When you browse the site: nothing. We don’t run analytics, ad pixels, or any other tracker, and we don’t ask you to create an account or log in anywhere on this site.

The audit form’s data exists for one reason: to review your store and get back to you with the video audit you asked for, and, if you engage us, to scope and deliver that work. That’s processing necessary to take the steps you asked for before a contract (Art. 6(1)(b) GDPR).

Audit form submissions are stored in our database, hosted on Supabase. Submitting the form also sends an email through Resend: one internal notification to us, and one confirmation to the email address you gave us. We don’t sell your data, and we don’t share it with anyone except these processors, each acting under their own data processing terms:

• Supabase · database hosting
• Resend · sends the notification and confirmation emails
• Vercel · hosts this site

Audit request data is kept as long as it’s useful for the reason you gave it to us: while we’re in touch about your audit, and for the length of any engagement plus the time needed to honor the 3x revenue guarantee and meet our own accounting obligations. If nothing came of an audit request, we delete it within 24 months of submission. You can ask us to delete it sooner at any time, see below.

Under GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict how we use it, or hand it to you in a portable format. Email tudor@tmrw.ro and we’ll handle it directly, no support ticket, no form. You can also lodge a complaint with Romania’s data protection authority (ANSPDCP) if you think we’ve mishandled your data.

If this policy changes in a way that matters, we’ll update the date at the top. Significant changes affecting how we use data we’ve already collected will be emailed to anyone it applies to.