Privacy Policy

1. Information We Collect

a. Account Information

When you register, we collect your name, email address, and (if signing in with Google) your Google account identifier. For password-based accounts we store a one-way bcrypt hash of your password; we never store your plain-text password.

b. Payment Information

Billing is handled by Stripe, Inc. We never store full credit card numbers on our servers. Stripe shares limited billing details (last-four digits, card brand, expiry, billing name) that we display in your account settings.

c. Connected Service Data

• Shopify: product catalog, inventory levels, pricing, SKUs, and order data accessed via the Shopify Admin API under your explicit authorization. The only data written back to your store is a URL redirect when a product page moves, so Google keeps finding the product; every permission and its purpose is listed on our Permissions page.
• Google Ads accounts: campaign performance metrics (spend, revenue, impressions, clicks, conversions, ROAS), conversion actions and the leads they record (chats, quote requests, calls, forms), keyword data, ad group structures, and audience lists accessed via the Google Ads API under your explicit OAuth grant.
• Google Merchant Center accounts: product feed status, item issues, product categories and GTINs, and the price competitiveness, price insights and (with Price Intelligence) competitive visibility reports, accessed via the Merchant API; the link between your Google Merchant Center and Google Ads accounts; and re-review requests for disapproved offers once the fix is verified.
• Google Analytics properties, only if you allow it: how many times each product was viewed, added to cart and bought in your own Google Analytics 4 property over the last 90 days, read-only, so Launch can put the products shoppers already want first.

This data is used to provide and improve the Service, as section 2 describes. We do not sell or rent it to third parties.

d. Usage and Log Data

We automatically collect log data including IP addresses, browser type, pages visited, and timestamps for security monitoring and debugging purposes. This data is retained for a maximum of 90 days.

We also count how often each part of the app is used — for example, how many times a filter, a table sort or a settings panel is opened — so that we can simplify the interface and decide which features to show by default. These are counts attached to your account, not a record of what you typed: we store the name of the control and the page it is on, never the text of your searches, your product or brand names, or the values you enter.

e. Cookies and Similar Technologies

We use session cookies necessary to authenticate your session (via NextAuth / Auth.js).

We also set two first-party cookies on spagify.com that record how you first found our site: the website that referred you, the campaign tags on the link you followed (such as utm_source), and the page you landed on. They last six months, only Spagify reads them, and we use them to learn which channels bring people to Spagify. If you create an account, we keep that record with it. We do not store your IP address or browser with it, and when you arrive from an ad we note only which ad network it was, never the ad's click identifier. We do not set these cookies when your browser sends a Global Privacy Control or Do Not Track signal. During onboarding we may also ask how you heard about Spagify; answering is optional.

We do not use third-party advertising cookies, and we do not share any of this with advertisers. You may disable cookies in your browser, but the Service will not function without session cookies.

2. Google API and Google Ads Data

Spagify relies on the Google APIs to operate. When you connect a Google account or a Google Ads account, we access and process the data described below. This section is provided in addition to the disclosures elsewhere in this policy and is intended to satisfy Google's OAuth and Limited Use requirements.

a. Data Accessed from Google

• Google account name and email address (used for authentication and to identify the connecting user).
• Google Ads customer and account identifiers (manager and child accounts you choose to connect).
• Campaigns, ad groups, product groups, and ad assets in connected Google Ads accounts.
• Search terms and negative keyword lists associated with connected accounts.
• Advertising performance metrics (impressions, clicks, conversions, cost, revenue, ROAS).
• Conversion actions and their settings, and the leads (chats, quote requests, calls, forms) each product's ads brought in, by the action that recorded them.
• Budgets, bids, bid strategies, and impression-share data.
• If you turn on Wider Net: the search terms and search categories of the Performance Max campaign Spagify runs for you, its results by network and by product, its ad text, images and videos as they stand in your Google Ads account, and Google's ratings and approval status for them.
• Google Merchant Center product status, disapprovals, product categories and GTINs.
• The price competitiveness and price insights reports in your Google Merchant Center account: Google's benchmark price and suggested price for each product, and the change in impressions, clicks and conversions Google predicts at that price.
• With Price Intelligence, the competitive visibility report in your Google Merchant Center account: the merchants whose offers appear beside yours in Shopping results, how often, and how often they rank above you.
• Google Analytics 4 item metrics (views, add-to-carts, purchases, item revenue), read-only and only if you grant it.
• OAuth access and refresh tokens issued by Google during the consent flow.

Spagify does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other Google product outside of the Google Ads advertising service, the Google Merchant Center console and the Merchant API, the Google Analytics service (read-only, only if you allow it), and basic Google account profile information.

b. How Google Data is Used

• Synchronizing your Google Ads account state with Spagify.
• Creating and running Spagify's own Shopping campaigns: bids, budgets and negative keywords, including the automation you turn on (Autopilot).
• If you turn on Wider Net: creating and running a Performance Max campaign beside each Spagify funnel, with its budget, return-on-ad-spend target, ads, images, product groups, search themes and negative keywords. Each day Spagify reads the campaign's results and adjusts it: it carries over the funnel's negative keywords, blocks searches that spent with no conversion and searches that Anthropic's Claude reads as being for another brand, for help with something the shopper already owns, or for a different kind of product, lowers the target when the campaign spends well under its budget while earning less than the target, and sets its search themes from the searches that bring conversions on your Spagify campaigns.
• Adding negative keywords to your account-level negative keyword list, which applies to every campaign in the account, including campaigns you run yourself.
• Pausing, turning on, or taking products out of your other campaigns only when you choose to.
• Fixing conversion tracking that cannot record a sale: counting or showing again a conversion action already in your account, or creating one. Spagify never switches one off.
• Generating product-level reporting, dashboards, and alerts, including the leads your ads bring in, shown beside your sales and never counted as a sale.
• Comparing your prices with the market: Google's benchmark and suggested prices on Pricing, on each product and in price alerts. Spagify never changes a price.
• With Price Intelligence: listing the merchants that Google's competitive visibility report names on Products → Competitors, and reading the public prices on those merchants' own storefronts to compare with yours. Spagify sends them nothing about your store.
• Sizing Spagify's bid changes with a small statistical model built only from your store's own bid changes and the clicks, costs and sales that followed. No other store's data goes into it, it is used for no other store, and it is not built until you agree to it.
• Running user-defined rules and alerts against the Google Ads API.
• Improving Spagify: we use the results and data from every store, yours included, to test and improve Spagify's automation, AI instructions and rules for all stores. No other store ever sees your search terms, products or numbers.
• Ryan, Spagify's founder, reviews your account data only if you allow it (founder review, in the connect dialog or Settings → Account), to support you and to check how Spagify runs your ads. No one else at Spagify does. You can turn it off at any time. Without it, people at Spagify look at your data only to investigate a bug or abuse, and each such look is listed, with its reason, in Settings → Account.

Before Spagify uses your Google data you see a summary of what it reads, changes and shares, and you agree to it; until you do, its AI does not read your store. If that changes, Spagifyasks you again, and the new use does not begin until you agree. The date and the person who agreed are shown in Settings → Account. A beta feature lists its new uses on its card in Settings → Beta features, and switching it on, or asking to join it, is your agreement to them. If a beta feature you have on starts a use its card did not list when you agreed, it waits until you agree to the new use on its card.

c. Sharing of Google Data

• We do not sell Google user data.
• We do not use Google user data for serving or targeting advertising on behalf of Spagify.
• We do not transfer Google user data to data brokers, information resellers, or advertising platforms other than the Google Ads account from which it originated.
• Google user data may be processed by contracted infrastructure and operational sub-processors (for example, AWS for hosting, monitoring, and database services). These providers are permitted to use the data only to provide services to Spagify.
• The Google data section 2d lists, with your store's name and product details, is processed by Anthropic (Claude), our AI provider, as section 2d describes.
• Depending on how your Google Merchant Center account is set up, Google may share its apps data, Spagify's included, with Google's Business Manager.

d. AI Processing of Google Data

Spagify uses Anthropic's Claude to read the following, with your store's name and, as each task needs them, your products' titles, brands, types, tags, SKUs, prices and stock from your store:

• The search terms in your Google Ads account, including searches on campaigns you run yourself, with their impressions, clicks, ad spend, conversions and Google Ads revenue: to decide which searches match your products, and to suggest and check negative keywords.
• The negative keywords already in your Google Ads account, with the campaigns, ad groups and lists they apply to: to decide which of them block shoppers who would buy, and which to keep, when Spagify imports your account.
• Your products' titles, brands, types and prices, and no Google data: to group your products by category.
• For a product shown or clicked far less than similar products in its campaign, or than Google's benchmark click rate: its bids, ad spend, impression share and click rate beside Google's benchmarks for them; its search terms and the negative keywords on it; the impressions, clicks and top search terms of those similar products; its approval status, disapprovals and Google's benchmark price from your Google Merchant Center account; and how often it sells, from your orders or, if you allow it, your Google Analytics property. This explains why the product trails, and what to change.
• If you turn on Wider Net: your store's name, the brand or category a funnel sells and its product titles, to write the Performance Max campaign's headlines and descriptions.

This runs automatically as part of the Service (for example, each time new search terms arrive), not only when you ask for it.

• Spagify keeps what it sent to Claude and what came back, so we can check the AI's work and test changes to it against real cases from every store. These records are deleted with your account.
• Google user data is not used to train, fine-tune, or otherwise improve generalized or public AI models, whether operated by Spagify or by our AI providers.
• The one model Spagify builds from Google data is the bid model above: a statistical model of your own store's bid changes, kept for your store alone, built only after you agree to it, and deleted with your account.
• AI providers are contractually bound to process the data solely to provide their services to Spagify and to retain it only as long as necessary to do so.

e. Security of Google Data

• All Google API traffic is encrypted in transit using TLS 1.2 or higher.
• OAuth refresh tokens and other credentials are encrypted at rest with keys held in AWS Key Management Service, and decrypted only in memory when Spagify calls Google.
• People at Spagify read your Google user data only with your founder-review agreement, or to investigate a bug or abuse; each look without the agreement is recorded with its reason and listed for you in Settings → Account. Service accounts reach it only to operate the Service.
• Authentication, authorization, and administrative actions are audit-logged for security review.
• Sub-processors with access to Google user data are reviewed for security posture and bound by written data-processing agreements.

f. Retention and Deletion of Google Data

• Disconnect your Google Ads account in Settings → Connections: Spagify stops calling Google for your account, asks Google to revoke its access, and deletes its copies of your tokens at once. If someone in your store also runs another store on Spagify, the access stays listed in your Google account (removing it there would cut off the other store too), but Spagify's copy is still deleted.
• Disconnecting keeps your history (campaign structures, metrics and search terms), so it is there if you connect again. To remove it, delete your account.
• Delete your account in Settings → Account: Spagify cancels your subscription, revokes its Google access and deletes all data it holds for your store at once, AI records included. Encrypted database backups age out within 14 days. We keep billing records as the law requires, and your store's Shopify address with the dates its subscriptions started and ended, so a store gets one free trial.
• When you disconnect or delete, you choose whether Spagify pauses its campaigns in your Google Ads account or leaves them running. Campaigns left running keep spending with nothing managing them.
• While your account is open, we keep operational Google Ads data so reports can show your history.
• You can also revoke Spagify's access to your Google account at any time at myaccount.google.com/permissions.
• Step by step: Manage and delete your data.

g. Google API Services User Data Policy — Limited Use

Spagify's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. People at Spagify view Google user data only to support you and check how Spagify runs your account when you have turned founder review on, to investigate a bug or abuse, or as the law requires.

3. Shopify API Data

Spagify connects to your Shopify store via the Shopify Partner API under your explicit authorization. This section describes what Shopify data we access, how we use it, and your rights regarding that data — including rights arising under Shopify's mandatory GDPR compliance requirements.

a. Data Accessed from Shopify

• Product catalog: titles, descriptions, images, handles, vendor, product type, and status.
• Product variant data: SKUs, prices, compare-at prices, inventory quantities, and selected options.
• Inventory levels: stock availability per location.
• Order data: order IDs, order numbers, total price, currency, and line items (variant IDs, quantities, prices). We capture the Shopify numeric customer ID only — we do not store customer names, email addresses, physical addresses, or phone numbers.
• Shop owner email address (used once during installation to create your Spagify account; not retained as a separate record).
• Shopify OAuth access token (encrypted at rest; used to call the Shopify API on your behalf).

b. How Shopify Data Is Used

• Populating your Spagify product catalog for campaign building and automation.
• Keeping inventory and pricing information current so Shopping ads reflect accurate product data.
• Attributing Google Ads conversions to orders using the GCLID captured at purchase time.

Shopify data is never used to target advertising for Spagify's own marketing, sold to third parties, or used to train generalized AI models.

c. GDPR Compliance Webhooks

Shopify requires all apps to respond to three mandatory GDPR webhooks. Here is how Spagify handles each:

• customers/data_request: When a customer of your shop requests their data, Shopify notifies us. We compile the order-level records (order IDs, amounts, conversion signals) associated with their Shopify customer ID and email a summary to the shop owner so you can fulfill the request within Shopify's 30-day SLA.
• customers/redact: When a customer redaction request is confirmed, we permanently delete all order records and associated offline-conversion data linked to that Shopify customer ID within 48 hours of receiving the webhook.
• shop/redact: Fired 48 hours after uninstall. We permanently delete all shop-specific data: integration connection (including the encrypted access token), all synced products, all order records, and all offline conversions associated with the store. Your Spagify workspace and Google Ads data are not affected.

d. Token Encryption

Shopify OAuth access tokens are encrypted before storage using AES-256-GCM envelope encryption. In production, encryption keys are managed by AWS Key Management Service (KMS) with automatic annual key rotation. Tokens are decrypted only in memory at the moment an API call is made and are never written to logs.

e. Retention and Deletion of Shopify Data

• Access tokens are deleted when you disconnect the integration or when Shopify sends the shop/redact webhook.
• Product catalog data is deleted as part of the shop/redact flow (48 hours after uninstall).
• Order and conversion data is deleted on shop/redact or immediately on customers/redact for individual customer requests.
• Deleting your Spagify account deletes all remaining Shopify-sourced data at once.

4. How We Use Your Information

• To create and manage your account and workspace.
• To provide, operate, and improve the Service, including automating campaign management on your behalf.
• To process payments and send billing-related communications.
• To send transactional emails (account confirmations, password resets, team invitations, critical service alerts). You may not opt out of transactional emails while your account is active.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations.
• With your consent, to send product updates or marketing communications. You may opt out at any time.

We do not use your Google Ads or Shopify data to train generalized AI models. We do use it, with data from other stores, to test and improve Spagify's own automation for every store; no other store sees it.

5. Sharing and Disclosure

We do not sell your personal information. We share data only in the following limited circumstances:

• Service Providers: Sub-processors who help us deliver the Service (Stripe for payments, AWS / cloud infrastructure, email delivery providers, and Anthropic for AI processing). Each is bound by a data processing agreement.
• Google LLC: We transmit data to and from Google APIs strictly to execute the automation actions you configure.
• Shopify Inc.: We read and write data through the Shopify API strictly to sync product data as authorized by you.
• Legal Compliance: We may disclose information when required by law, subpoena, or governmental authority, or to protect the rights, property, or safety of Spagify, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on the Service before your data becomes subject to a different privacy policy.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your personal data and your store's data at once; encrypted database backups age out within 14 days. Billing records are kept where the law requires it (up to 7 years). We also keep your store's Shopify address, its plans and the dates its subscriptions and free trial started and ended, with any reason you gave for cancelling, so that each store gets one free trial. We keep what each subscription was billed each day for Spagify's own revenue records, under an account number that no longer leads to you, without your name or store. These records hold no Google data.

7. Data Security

We implement industry-standard security measures including:

• Encryption in transit via TLS 1.2+.
• Encryption at rest for database volumes.
• OAuth 2.0 authorization-code flow for all third-party integrations; OAuth tokens are encrypted at rest.
• Role-based access controls within workspaces.
• Audit logging for authentication and administrative actions.
• Regular dependency updates and vulnerability scanning.

No method of transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights or freedoms, we will notify affected users and relevant authorities within 72 hours as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data (subject to legal retention obligations).
• Portability: Receive your data in a structured, machine-readable format.
• Objection / Restriction: Object to or restrict certain processing activities.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time.
• CCPA (California residents): You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

You can delete your account yourself in Settings → Account, and disconnect your Google Ads account in Settings → Connections (how). For anything else, contact us at legal@spagify.com. We will respond within 30 days. If you are in the EEA/UK and believe we have violated your data rights, you have the right to lodge a complaint with your local supervisory authority.

9. International Transfers

Spagify is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will delete such information promptly.

11. Third-Party Links

The Service may contain links to third-party websites (e.g., Google, Shopify). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date, and by emailing you if the changes are significant. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Spagify
Email: legal@spagify.com