Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Service.
• To display your marketing data in an aggregated and analyzed format on your private dashboard.
• To generate AI-powered insights and recommendations to help you optimize your marketing strategies.
• To process transactions and manage your subscription.
• To communicate with you, including responding to your inquiries and sending service-related announcements.

3. Compliance with Google API Services User Data Policy

Glowytics' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our application does not use any Google Workspace APIs. For full transparency, you can review the general policy and the specific Workspace API policy, which includes the "Limited use of user data" requirement, at the following links:

• Google API Services User Data Policy
• Google Workspace API User Data and Developer Policy

4. Google Merchant Center Data

When you connect your Google Merchant Center account, we request the https://www.googleapis.com/auth/content scope and access your Merchant Center data through the Merchant API with read-only use.

• What we access: product data in your Merchant Center account (offer ID, title, description, link, image links, brand, category, GTIN, price, sale price, availability, condition, item group, color, size and custom labels), product statuses and item-level issues, account-level issues, and Merchant Center reports such as product performance, price competitiveness, best sellers and competitive visibility.
• What we do not do: we never create, edit or delete products, feeds or account settings in your Merchant Center account. Merchant Center product data does not contain your customers' personal information, and we do not request any.
• Why: only to show you, in your private Glowytics dashboard, your feed inventory, disapproved products and their reasons, account issues, price and discount changes over time, price competitiveness, best sellers and how your feed affects your Shopping ad performance.
• How: we read this data on a daily schedule and when you open the related reports, and store it in a database that is separated per brand and only accessible to the users of that brand.
• Sharing: Merchant Center data is used exclusively to provide the Service to you. We do not sell it, use it for advertising, or share it with third parties, except as described in section 6. Our use of this data adheres to the Google API Services User Data Policy, including the Limited Use requirements (section 3).
• Security: data is encrypted in transit (TLS) and at rest. Google OAuth tokens are stored encrypted, and access is limited to authorised staff.
• Retention and deletion: we keep Merchant Center data while your Merchant Center account is connected. You can disconnect it at any time from the Settings page, and you can request deletion of the stored data as described in section 8.

5. Shopify Store Data

When a merchant installs the Glowytics app from the Shopify App Store, we access their store data through the Shopify Admin API with read-only permissions.

• What we access: orders (order number, dates, totals, taxes, discounts, payment and fulfillment status, sales channel), order line items (product, SKU, quantity and price), product types and collections, and the numeric Shopify customer ID attached to each order.
• What we do not access: customer names, email addresses, phone numbers or postal addresses. We do not request these fields and do not store them.
• Why: only to provide the merchant with analytics in Glowytics, such as revenue trends, product performance, repeat purchases and the comparison of store revenue with advertising spend. The customer ID is used solely to recognise repeat purchases. We do not sell this data, share it with third parties or use it for any purpose other than providing the Service to that merchant.
• Roles: the merchant is the controller of their store and customer data; Glowytics processes it on the merchant's behalf and only on their instructions. This policy and our Terms of Service form our data processing terms with merchants.
• Security: Shopify data is encrypted in transit (TLS) and at rest (AES-256 encrypted storage). Store access tokens are encrypted, backups are encrypted before leaving our servers, and access is limited to authorised staff.
• Retention and deletion: we keep Shopify data while the app is installed. When the app is uninstalled, the store's access token is deleted immediately and all synced store data is deleted when Shopify sends the shop redaction request (48 hours after uninstall). Customer redaction and data requests received from Shopify are processed within 30 days.

6. Data Sharing and Disclosure

We are committed to keeping your data private. We do not share, transfer, or disclose any Google user data obtained through Google APIs with any third parties.

All data is used exclusively within the Glowytics platform to provide analytics services directly to you, the authenticated user. The only exceptions to this rule are:

• To comply with a legal obligation or a valid governmental request.
• To protect and defend the rights or property of Glowytics.
• To prevent or investigate possible wrongdoing in connection with the Service.

7. Data Security

The security of your data is a top priority. We implement and maintain industry-standard security measures to protect your information. These measures include:

• Encryption: Data is encrypted in transit using SSL/TLS and encrypted at rest using advanced encryption standards.
• Access Control: Access to sensitive data is strictly limited to authorized personnel and is logged and monitored.
• Secure Infrastructure: Our services are hosted on secure cloud infrastructure that provides robust physical and network security.

8. Data Retention and Deletion

We retain your data only for as long as your Glowytics account is active or as needed to provide you with our services. You have full control over your data.

• Data Deletion: You can permanently delete your Google data from our platform at any time by disconnecting your Google account from our "Settings" page.
• Account Deletion: If you delete your Glowytics account, all associated data, including any data synced from Google, will be permanently and irretrievably deleted from our systems within 30 days.

9. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings or by contacting us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page. We encourage you to review this policy periodically for any changes.

Contact Us