Privy

The typical implementation process for Privy software involves several key steps to ensure a smooth integration and optimization of its email, SMS, and list growth tools for e-commerce businesses. Here’s an overview of the process:

1. Account Setup

• Create a Privy account: Sign up on the Privy website.
• Connect your store or site: Install Privy on your e-commerce platform (e.g., Shopify).
• Set up a sending domain: Configure a custom email domain to ensure better deliverability.
• Update business information: Add your business address to comply with email marketing regulations.
• Import existing subscribers: Migrate your contact lists into Privy.

• Configure integrations: Sync Privy with other tools you use, such as Shopify or other CRM systems.

2. Create Core Displays and Automation

• Build conversion displays: Set up pop-ups, welcome discounts, cart savers, and cross-sell displays to capture leads and increase conversions.
• Set up targeting rules: Customize display targeting based on user behavior to optimize engagement.

• Create email and SMS automation: Set up automated email flows like abandoned cart emails, purchase follow-ups, and welcome series. Similarly, configure SMS campaigns for timely customer engagement.

3. Training and Strategy Development

For businesses looking for more hands-on support, Privy offers its Accelerate Program, which is a 30-day onboarding process:

• 1-on-1 coaching: A dedicated expert helps set up the account foundation, including list imports and domain setup.
• Weekly strategy calls: The expert provides training on using advanced features like segmentation and cross-selling.

• Custom checklist: A tailored 30-day checklist ensures all necessary features are implemented effectively.

4. Ongoing Optimization

Once the initial setup is complete, businesses can continue to optimize their campaigns by:

• Monitoring performance metrics through the dashboard.
• Iterating on content with A/B testing.

• Leveraging additional resources like masterclasses or Privy's support team for further guidance.

Implementation Timeline

The basic setup of Privy can be completed relatively quickly—often within a few hours or days depending on the size of your contact list and the complexity of your integrations. However, if you opt for the Accelerate Program or require more advanced customization, the process typically spans around 30 days. This period includes training sessions, strategy development, and ongoing optimization with the help of a dedicated expert.

Privy software can be customized to fit specific business needs, offering a range of customization options across its various tools and features. Here are several points highlighting the customization capabilities of Privy:

1. Branding Customization

Privy allows businesses to customize the appearance of their marketing materials to align with their brand identity:

• Logos and Brand Colors: You can upload your brand’s logo and set custom accent colors for buttons and links within Privy's user interfaces, ensuring that all communications reflect your brand's visual identity.
• Email Templates: Privy’s email editor allows you to customize emails with your brand colors, fonts, logos, and social media links. You can either use pre-built templates or create your own from scratch.

• Display Customization: Pop-ups and other onsite displays (such as exit-intent displays or spin-to-win games) can be fully customized in terms of design, messaging, and targeting rules to match your business goals.

2. Custom Workflows and API Integration

For more advanced users, Privy offers configurable APIs that allow businesses to create custom workflows:

• Custom Digital Identity Workflows: Businesses can use Privy’s API suite to create tailored digital identity and electronic signature workflows. This is useful for industries that require specific compliance or security measures, such as finance or healthcare.

• Web3 Integrations: Privy supports integration with Web3 technologies, allowing businesses to customize how they manage authentication (e.g., using custom wallets or signing transactions). Developers can configure these features using the Privy SDK along with custom authentication providers like Auth0.

3. Custom Forms and Multi-Step Displays

Privy provides flexible form-building tools that allow businesses to:

• Form Layouts: Customize the layout of form fields and buttons within pop-ups or landing pages. This includes positioning elements exactly how you want them for optimal user experience.

• Multi-Step Displays: With multi-step display templates, businesses can gather more information from users in stages, such as collecting both email addresses and phone numbers for SMS marketing. These templates are fully customizable in terms of design and flow.

4. Targeting and Segmentation

Privy enables businesses to create highly targeted marketing campaigns through segmentation:

• Custom Segments: Businesses can create segments based on customer attributes like shopping behavior, purchase history, or engagement with previous campaigns. This allows for personalized email and SMS campaigns tailored to different customer groups.

• Targeted Pop-ups: Pop-ups can be displayed based on specific user behaviors (e.g., exit intent or time spent on a page), allowing businesses to tailor their onsite marketing efforts more effectively.

5. CSS Overrides

For even more granular control over the appearance of Privy’s models and interfaces, users can apply CSS overrides:

• Businesses can adjust specific elements like border-radius, background colors, and text colors using custom CSS variables. This is particularly useful for those who want their pop-ups or login modals to match their website's exact design system.

6. Custom Authentication Options

Privy supports integration with custom authentication providers:

• Businesses can integrate third-party authentication systems like Auth0 alongside Privy’s embedded wallet functionality. This allows for a seamless login experience that fits the specific security requirements of the business.

Privy offers a range of pricing plans with no setup fees, activation fees, or annual contracts, making it relatively straightforward in terms of additional costs. However, there are some factors to consider regarding ongoing expenses:

1. Subscription Costs

• Free Plan: For businesses with fewer than 5,000 monthly page views, Privy is free to use. This includes basic features like popups and email collection.
• Starter Plan: Starts at $15/month and scales based on the number of mailable contacts. For example, up to 1,500 contacts cost $30/month, and the price increases as your contact list grows.

• Growth Plan: Starts at $45/month for up to 2,000 contacts and includes SMS marketing features. The cost also scales with the number of contacts and messages sent.

2. Additional Costs

• Scaling Fees: As your business grows, so does the cost. For both email and SMS services, the price increases based on the number of contacts:
  • Email scaling: $15/month for every additional 1,000 contacts up to 25,000 contacts. Beyond that, it scales at $30/month for every 5,000 contacts.

  • SMS scaling: Charges increase based on the number of textable contacts and the number of messages sent. If you exceed your plan's limit (e.g., sending more than 450 texts), you will be charged for additional sends.

3. Maintenance and Support

• Customer Support: Privy provides email and chat support across all paid plans. For businesses with over 9,000 email contacts, a Dedicated Customer Success Manager is included at no extra charge.

• Onboarding: Onboarding is free for Growth Plan users and includes one-on-one sessions to help set up the platform.

4. No Hidden Fees

Privy emphasizes that there are no hidden costs such as activation or setup fees. However, businesses should be aware that as their contact list grows or they send more SMS messages, their monthly fees will increase accordingly.

Privy offers a variety of training and support options to help new users get the most out of the platform. These resources cater to different levels of experience and needs, from basic onboarding to more advanced, personalized coaching. Here’s an overview of the key training and support options:

1. Self-Service Resources

Privy provides several self-service tools that help users learn at their own pace:

• Get Started Checklist: A step-by-step guide that walks new users through essential setup tasks, such as account creation, display setup, email configuration, and performance tracking.
• Learning Center: This hub offers on-demand learning resources, including FAQs, tutorials, and courses. The content is categorized by experience level (Beginner, Intermediate, Advanced), making it easier for users to find relevant information.

• Tooltips: In-app tooltips provide additional context on powerful features while navigating the platform.

2. Customer Support

Privy offers multiple ways to get in touch with their support team:

• Email Support: Users can reach out via email for assistance, with responses typically provided within 24 hours.
• Live Chat: A messenger panel is available within the Privy app for real-time support and answers to questions.

• Knowledge Base: The Privy Knowledge Base includes articles on various topics related to setup, troubleshooting, and best practices.

3. Accelerate Program

For businesses looking for more hands-on guidance, Privy offers the Accelerate Program, a 30-day onboarding process designed to help users implement the platform quickly and effectively:

• 1-on-1 Coaching: Users work closely with a dedicated Privy expert who helps build out the account foundation, including list imports, sending domain setup, and feature implementation.
• Weekly Strategy Calls: During the program, users receive weekly calls to discuss content planning, strategy development, and advanced features like segmentation and cross-selling.

• Custom Checklist: A tailored 30-day checklist is provided to ensure that all necessary features are implemented based on the specific needs of the business.

4. Ongoing Education

Beyond initial setup and support, Privy offers ongoing educational resources:

• Masterclasses: These sessions provide advanced insights into e-commerce marketing strategies to help businesses optimize their use of Privy’s tools.
• Ecommerce Marketing Show: A podcast that shares tips and best practices from industry experts to inspire new ideas for growing businesses.

Privy implements a comprehensive set of security measures to protect user data. These measures cover encryption, access control, data residency, and compliance with industry standards. Here are the key security practices in place:

1. Data Encryption

• At Rest: All customer data is encrypted at rest using strong encryption algorithms, such as AES-256-GCM or public-private key encryption with a minimum key size of 1024 bits. This ensures that even if data is accessed without authorization, it remains unreadable.
• In Transit: All data transmitted between users and Privy’s servers is encrypted using TLS (Transport Layer Security), with a minimum supported version of TLS 1.2. This protects data from being intercepted during transmission.

• HSTS Enforcement: Privy enforces HTTP Strict Transport Security (HSTS) across all subdomains, ensuring that browsers only communicate with Privy over secure HTTPS connections.

2. Access Control and Authentication

• Multi-Factor Authentication (MFA): MFA is mandatory for anyone with direct access to Privy's infrastructure and customer backups. This adds an extra layer of security by requiring multiple forms of verification.
• Least Privilege Principle: Privy adheres to the principle of least privilege, meaning that team members only have access to the data necessary for their roles. Fine-grained access controls prevent unauthorized access to sensitive information.

• OAuth 2.0 and SIWE Authentication: For end-users, Privy supports secure authentication methods such as OAuth 2.0 for social logins (Google, Apple, etc.) and "Sign In With Ethereum" (SIWE) for wallet verification.

3. Password Security

• Salting and Hashing: All passwords are salted and hashed using one-way encryption before being stored, making it extremely difficult to reverse-engineer them even if the database is compromised.

4. Data Backup and Recovery

• Daily Backups: Privy performs full database snapshots daily and uploads transaction logs every five minutes to backup storage. These backups are retained for seven days, allowing for recovery in case of data loss or corruption.

• Redundant Infrastructure: Customer data is stored on redundant infrastructure across multiple availability zones to eliminate single points of failure.

5. Compliance and Certifications

• SOC 2 Compliance: Privy is SOC 2 compliant, ensuring that its systems meet high standards for security, availability, confidentiality, and privacy.
• PCI DSS Compliance: Payment information is handled by a separate organization certified as a PCI Service Provider Level 1, the most stringent certification available for handling payment data.

• ISO Certifications: Privy’s data center security is managed by AWS, which holds certifications like ISO 27001 (Information Security Management) and ISO 27701 (Privacy Information Management).

6. Vulnerability Management

• Regular Patching: Privy regularly patches vulnerabilities in both its own software and third-party packages. Automated alerts notify the team when new security patches are available.

• Code Reviews and Testing: All code changes undergo extensive unit, integration, and static analysis testing before deployment. Additionally, human reviews help ensure that no vulnerabilities are introduced into production environments.

7. Data Residency

• All customer data is stored within the continental United States, while static assets may be served globally through a content delivery network (CDN).

8. Physical Security

• Physical security for Privy's datacenters is managed by Amazon Web Services (AWS), which has achieved top-tier certifications like ISO 27001 and SOC compliance. AWS employs strict physical access controls to protect server infrastructure.

9. Incident Monitoring and Response

• Privy constantly monitors its systems for performance issues or security incidents. A status page provides real-time updates on service availability.

Privy releases updates multiple times per week, reflecting an agile development process that ensures continuous improvement and rapid deployment of new features and bug fixes. These updates include both new functionalities and security patches.

Update Management Process

1. Code Reviews: All application code changes undergo multiple forms of review, including both human and automated checks, before they are deployed. This ensures that only thoroughly tested and secure code is released.

2. Testing: Extensive unit, integration, and static analysis tests are conducted on all changes to ensure stability and functionality. This testing process helps catch potential issues before they impact users.

3. Deployment: Updates are rolled out regularly across separate production and development environments, which are kept on physically distinct networks. This separation minimizes the risk of disruptions in the live environment during updates.

4. Vulnerability Patching: Privy also manages software vulnerability patching on a rolling basis. The platform automatically applies patches to many of its systems and has an alerting system in place for when new security patches are available for third-party software components.

Privy's policy on data ownership and portability is designed to ensure that customers retain control over their data while also providing mechanisms for data export and transfer. Here are the key points:

1. Data Ownership

• Customer Ownership of Data: Privy explicitly states that the customer retains ownership of all the data they collect through the platform, including subscriber information such as email addresses and other customer details. This is referred to as "Customer Materials" in their terms. Privy only has a non-exclusive, royalty-free license to use, display, and modify this data solely for the purpose of providing its services.

• Privy’s Use of Data: While Privy processes and uses customer data to deliver its services, it does not claim ownership over this data. The company uses the data strictly in accordance with the customer’s instructions and applicable privacy laws. Privy also commits to not sharing user data with third parties beyond essential partners and service providers needed to deliver their services.

2. Data Portability

• Data Export: Privy allows users to export their data at any time. Customers can request an export of their data, including subscriber lists and other personal information collected through the platform, by contacting Privy support. This ensures that businesses can move their data to another service or system if needed.

• No Data Lock-In: Privy emphasizes that it will never lock user data into its systems, meaning businesses can always retrieve their data without restrictions or penalties. This aligns with best practices for ensuring customer flexibility and control over their information.

3. Compliance with Privacy Regulations

• GDPR Compliance: For users in jurisdictions like the European Union (EU), Privy complies with GDPR (General Data Protection Regulation) requirements, which include provisions for data portability. Under GDPR, users have the right to request a copy of their personal data in a commonly used format so they can transfer it to another service provider.
• Other Legal Requirements: Privy also complies with other relevant privacy regulations, such as the California Consumer Privacy Act (CCPA), which similarly grants users rights related to accessing and transferring their personal information.

Privy’s terms for scaling up or down as organizational needs change are flexible and designed to automatically adjust based on the number of mailable or textable contacts in the account. Here are the key points:

1. Automatic Scaling

• Email Scaling: Privy’s plans automatically scale based on the number of mailable contacts in your account. For example, if you exceed the contact limit of your current plan, you will be automatically upgraded to the next pricing tier. Similarly, if your contact list decreases, Privy will automatically downgrade you to a lower tier without requiring any action from you.

• Text Scaling: For SMS marketing, the Growth Plan includes a set number of textable contacts and message sends. If you exceed the number of texts allowed in your plan, you will be charged at a higher tier based on your total number of texts sent for that billing cycle.

2. Pricing Tiers

The pricing scales as follows:

• Starter Plan: Starts at $30/month for up to 1,500 mailable contacts. The price increases by $15/month for every additional 1,000 contacts up to 25,000 contacts. Beyond that, it scales by $30/month for every additional 5,000 contacts.

• Growth Plan: Starts at $45/month for up to 2,000 mailable contacts and 75 textable contacts (with up to 450 sends). The cost increases similarly to the Starter Plan for email scaling and adjusts based on textable contacts and sends.

3. No Manual Action Required

• The scaling is automatic and does not require manual intervention from the user. Privy tracks the number of mailable and textable contacts during each billing cycle and adjusts the plan accordingly.

4. Downgrades

• If your contact list decreases below a previous tier's threshold, Privy will automatically move you to a lower pricing tier in the next billing cycle. No notification is sent, but users can see changes reflected in their billing statements.

5. No Long-Term Contracts

• Privy does not require annual contracts or activation fees, allowing businesses to scale their plans up or down without being locked into long-term commitments.

Privy’s terms and conditions for contract renewal and cancellation are designed to offer flexibility while ensuring transparency for users. Here are the key points regarding these processes:

1. Contract Renewal

• Automatic Renewal: All Privy subscription plans, whether monthly or annual, automatically renew at the end of each billing cycle (monthly or yearly) unless canceled by the user. The renewal is charged to the payment method on file.
• Renewal Notice for Annual Plans: For annual subscription plans, Privy provides a 40-day notice before the renewal date. This gives users time to review their plan and decide if they want to continue with the service or cancel before the next billing cycle starts.

• Price Adjustments: If there are any changes in pricing, Privy will notify users at least 14 days in advance via email. If users continue to use the service after this notice period, they are deemed to have accepted the new pricing.

2. Cancellation Policy

• How to Cancel: Users can cancel their subscription at any time by navigating to the "My Plan & Billing" page in their Privy account and selecting the appropriate "Cancel" button next to their plan. Alternatively, users can email Privy’s billing team at [email protected] for assistance with cancellations.
• Immediate Effect of Cancellation: Upon cancellation, users immediately lose access to any paid features associated with their plan. The account will be downgraded to a free plan, but data such as subscriber lists will still be maintained unless the account is closed or deleted.
• Uninstalling Does Not Cancel Subscription: Simply uninstalling or removing Privy from an e-commerce platform (e.g., Shopify) does not automatically cancel a subscription. Users must manually cancel their plan through the Privy dashboard or by contacting support.
• No Refunds for Monthly Plans: Monthly subscriptions are generally non-refundable. Once a user cancels, they will not receive a refund for any unused portion of that month’s subscription fee.

• Annual Plan Refunds: For annual subscriptions, users can cancel within 30 days of the initial subscription date and request a pro-rated refund for the unused portion of the service period. After 30 days, no refunds are provided unless Privy terminates the account for reasons not related to user violations.

3. Account Closure

• If users wish to completely close their account (not just cancel a plan), they can do so by navigating to the "Business Information" page and clicking "Close Account." This action is irreversible, and all data associated with the account will be permanently deleted.

Privy meets several key compliance standards to ensure data security and privacy for its users. Here are the main compliance certifications and standards that Privy adheres to:

1. SOC 2 Compliance

• SOC 2: Privy is SOC 2 compliant, which means it adheres to strict security, availability, confidentiality, and privacy controls. SOC 2 compliance is particularly important for software companies that handle sensitive customer data, as it ensures that systems are designed to keep data secure.

2. ISO Certifications

• ISO 27001: Privy is certified under ISO 27001, which is an international standard for Information Security Management Systems (ISMS). This certification demonstrates that Privy has a systematic approach to managing sensitive company information, ensuring it remains secure.

• ISO 27701: Privy also complies with ISO 27701, which extends ISO 27001 to include Privacy Information Management Systems (PIMS). This standard focuses on managing personally identifiable information (PII) and ensuring privacy best practices are followed.

3. PCI DSS Compliance

• For payment-related data, Privy ensures compliance with the Payment Card Industry Data Security Standard (PCI DSS). Specifically, payment information is stored by a separate organization that is certified as a PCI Service Provider Level 1, the highest level of certification available for payment data security.

4. FIPS and WebTrust Certifications

• Privy supports compliance with FIPS (Federal Information Processing Standards) and WebTrust certifications, which are critical for cryptographic security and digital certificates. These certifications ensure that Privy's cryptographic operations meet stringent federal standards.

5. Data Residency and Privacy Laws

• GDPR Compliance: Privy complies with the European Union’s General Data Protection Regulation (GDPR), ensuring that it meets strict requirements for data protection, user consent, and data portability.
• CCPA Compliance: For users in California, Privy complies with the California Consumer Privacy Act (CCPA), which provides enhanced privacy rights and consumer protections.

• DPDP Act Compliance: In India, Privy aligns with the Digital Personal Data Protection (DPDP) Act, ensuring compliance with local privacy regulations.

6. Additional Security Audits

• Privy regularly undergoes security audits to address evolving threats in the cybersecurity landscape. These audits help ensure that the platform remains compliant with industry standards and continues to provide a secure environment for its users.