1. Introduction
This Privacy Policy explains how Adsify ("we", "us", or "our") collects, uses, and protects information when you install and use our Shopify application. By installing the app, you agree to the practices described in this policy.
2. Information We Collect
From your Shopify store
- Product catalog data: titles, descriptions, prices, images, variants, inventory levels, and product metadata required to submit listings to advertising channels.
- Order data: order totals and anonymised purchase events used solely for server-side conversion tracking (Meta CAPI, Google Ads conversions). We do not store customer names, emails, or addresses.
- Store settings: currency, country, and domain used to configure channel feeds correctly.
From channel integrations (Google, Meta, Microsoft)
- OAuth access tokens and refresh tokens, encrypted at rest using AES-256-GCM, used solely to submit product data and retrieve submission status on your behalf.
- Merchant account identifiers (Merchant Center IDs, Business Manager IDs, Bing Merchant Center IDs) used to route product submissions to the correct account.
Usage data
- Application logs (job execution, submission results, error messages) retained for 30 days for debugging purposes.
- We do not use cookies, tracking pixels, or analytics on pages within the Shopify Admin embedded interface.
3. How We Use Your Information
- Product submission: Transmitting your product catalog to Google Merchant Center, Meta Catalog, and Microsoft Merchant Center on your behalf.
- Feed management: Applying your configured feed rules, overrides, and promotions to product data before submission.
- Conversion tracking: Forwarding anonymised purchase event data to Meta CAPI and Google Ads APIs when you enable server-side tracking.
- Operational monitoring: Diagnosing submission failures, rate limit issues, and OAuth token refresh errors.
We do not sell, rent, or share your data with any third party except the advertising channels you explicitly connect to this app.
4. Data Storage and Security
- All data is stored in encrypted PostgreSQL databases hosted on infrastructure within the United States.
- OAuth tokens are encrypted at rest using AES-256-GCM before being written to the database. Decrypted tokens exist only in application memory during active API calls.
- Access to the database is restricted to application servers via private networking. No external database access is permitted.
- We conduct regular security reviews and apply security patches to all application dependencies.
5. Data Retention
- Active stores: Product data, submission history, and feed configuration are retained for as long as the app is installed.
- After uninstall: All shop data is deleted within 48 hours of receiving the
shop/redact GDPR webhook from Shopify. - Customer data: We store no customer PII. Anonymised purchase event hashes used for webhook deduplication are deleted within 30 days.
- Application logs: Retained for 30 days, then automatically purged.
6. GDPR and Your Rights
We comply with Shopify's mandatory GDPR webhooks:
- customers/data_request: We store no customer PII and have nothing to return.
- customers/redact: We store no customer PII and have nothing to redact.
- shop/redact: Deletes all store data including products, submissions, connections, feed rules, and promotions.
If you are located in the European Economic Area (EEA) and believe we hold any personal data about you, please contact us using the details in Section 9 to exercise your rights of access, correction, or deletion.
7. Third-Party Services
Your product data is transmitted to the following third-party services only when you explicitly connect them:
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at:
Email: support@adsify.shop
We aim to respond to all privacy inquiries within 5 business days.