Last updated: September 2026
Account information (name, email, etc.), payment-related information (processed by our payment provider), and information about how you use the Service.
To provide and operate the Service, verify identity, bill fees, improve features, provide support, and send important notices. Where you have given consent, we also use your email address to send product news, tips and occasional offers.
We send product news and tips only to people who have explicitly opted in — for example, by ticking the box at sign-up. Creating an account alone does not subscribe you. Every marketing email identifies the sender and includes a way to unsubscribe, and we stop sending promptly once you opt out. Service messages such as password resets, billing and incident notices are sent regardless of this setting.
All measurement runs on our own first-party snippet. It is privacy-friendly and does not rely on cookies; we do not perform cross-site tracking or measurement intended to identify individuals. We never use an external analytics service for ongoing measurement. Only where you explicitly ask us to do so, we import daily aggregated data from your Google Analytics 4 property for the period before the snippet was installed (never visitor-level data), and you can disconnect at any time. Imported aggregates and our first-party measurement aggregates may also be used for internal product verification and improvement, in the de-identified form described in Section 11.
We entrust parts of data processing to external providers such as payments (Paddle) and hosting (Render). If you use the historical import, we also read your Google Analytics 4 data through an API operated by Google LLC. Each handles information under its own privacy policy.
Except as required by law, we do not provide personal information to third parties without prior consent. Cross-customer benchmarks shown to other customers use only first-party measurement data.
We take necessary and appropriate measures to prevent leakage, loss, or damage of the information we hold. All traffic is encrypted in transit (TLS), and stored data is held in a managed database that is encrypted at rest. Credentials for connected e-commerce platforms (access tokens and similar) are additionally encrypted by us before storage.
Upon your request, we handle disclosure, correction, suspension of use, or deletion of your retained personal data. On account closure, data is deleted per our policies.
From an e-commerce platform you ask us to connect, we read each order's timestamp, currency, tax, shipping and total, together with its line items (product id, SKU, product title, quantity, unit price and line revenue). We do not read a shopper's name, address, email address or phone number, and our database holds no field that identifies a shopper. This data is used only for sales analysis and recommendations for your own store. The orders and line items themselves (product titles, amounts, quantities) are never used for cross-customer learning or benchmarking and are never shown to other customers. The only exception is the de-identified statistics described in Section 11 (for example, how metrics changed before and after each kind of recommendation), which may be built from aggregates derived from order data and which identify neither your store, your products nor any shopper.
We retain the data for as long as you use the Service. When you delete a site or close your account, we promptly delete the related data for that site, including measurement data, orders and order line items. We do the same when a connected platform sends us a redaction request. This does not cover the de-identified statistical copies and records described in Section 11, which are not linked to your account or site and from which you cannot be identified.
To verify that the Service works correctly and to improve the quality of its analytics and recommendations, we may keep two kinds of internal statistics: (a) copies of daily aggregates built from the data the Service measures or obtains (including first-party measurement aggregates, imported historical aggregates, and aggregates derived from order data), and (b) records of which kinds of recommendations the Service showed and how the related metrics (such as conversion rates) changed before and after. We hold both in a form that is not linked to your account or site, and we commit to the following. (i) They contain no visitor-level or shopper-level data. (ii) Page URLs, product names and campaign names are not kept in their original form; site-search terms are not kept at all. (iii) Your store name and domain are not kept. (iv) We do not disclose them to third parties, do not use them for advertising, and never show them to other customers. (v) We may keep them after your contract ends, solely for the purposes above.
For questions about this policy, contact [email protected].