Privacy Policy

From you: your name, email address and organization details, plus authentication data — a password hashed with Argon2id, and optional TOTP multi-factor secrets. We never store your password.

From your Shopify store: product catalog, orders and customer records. Your customers’ email addresses are stored only as a SHA-256 hash — the plaintext address is never written to our database. We do store customer first and last name, city, region, country, order count and total spend, because campaign targeting and segmentation are computed from them.

From your ad accounts: campaign structure, spend, impressions, clicks and conversions from the Meta and Google accounts you connect. Once an account is connected, its access token is stored encrypted.

Automatically: IP address, user agent and login history, used to detect suspicious sign-ins.

We use information to provide and improve the Service, generate marketing recommendations, personalize your experience, communicate with you, and maintain security. We do not sell your personal data.

We do not sell personal data. We share it only with the subprocessors below, each for a stated purpose:

• Shopify — store, product, order and billing data.
• Meta and Google — campaign data for the ad accounts you connect. When you connect a Meta ad account that has exactly one Meta pixel, we link that pixel to your store; otherwise you choose one, and we create a new pixel only when you ask us to. Once a pixel is linked, we send Meta a server-side Purchase event for each order. Each event carries the order value, currency, products and the store page the order started on; the buyer’s email, phone, name, city, region, postcode, country and Shopify customer ID, each hashed with SHA-256; and the buyer’s IP address and browser user agent unhashed, because Meta requires them as sent. Retargeting campaigns also send Meta hashed customer email addresses to build Custom Audiences.
• Tools you connect — only when you connect them. Klaviyo receives, for each customer, their email address (read from Shopify during the sync and not kept by us), MyBotify segment, total spend, order count, average order value, last order date, repeat-buyer flag and discount sensitivity, as profile properties in your Klaviyo account, daily and whenever you sync. It does not change anyone’s email consent. Google Merchant Center receives your product catalog. When you open an ad in Canva, Canva receives that ad’s image, or its product photo, with the ad’s headline as the design’s name, and keeps the design in your Canva account; we bring the finished image back and store it with the ad. Filling a brand template also sends Canva the ad’s text and button text, and the product’s name and price. Slack receives the store’s alerts in the channel you choose: their titles and short descriptions, such as campaign names, rule alerts and task results, with a link back to MyBotify. Google Search Console and Google Analytics are only read from.
• AI model providers (OpenAI, Anthropic, Google, Groq, Cerebras, Mistral) — the store, product and campaign context needed to generate marketing recommendations. When the crew looks up customers for you, that context includes customer names, city and country, order counts and total spend.
• Langfuse — AI request traces and token usage.
• Sentry — application error reports.
• Google Analytics — aggregated usage of the marketing site (mybotify.com) only, never the app.
• AbuseIPDB — IP reputation checks at sign-in.
• Cloudflare — proxies all traffic to our website and app (content delivery and DDoS protection), runs Turnstile bot checks on public forms where we use it, and stores ad images in Cloudflare R2: the images you upload for an ad and the ones we bring back from Canva. The storage is private: an image can be reached only through a link that expires within a day.
• Google reCAPTCHA — bot checks on public forms where we use it instead of Turnstile.
• Our email provider (an SMTP relay or Amazon SES) — your email address and the account emails we send you: verification, sign-in and password-reset links, security alerts and notifications.
• Have I Been Pwned — breached-password checking. We send only the first five characters of a hash and never the password itself.

We may disclose data where required by law.

Your plan sets how long AI activity is kept. AI task history, chat messages and the crew’s memories older than one month on Free, six months on Starter, twelve on Growth and twenty-four on Pro are pruned automatically; Scale keeps them for the life of the account. Store, order, customer and campaign data is kept while your account is active.

Account and audit records are retained for as long as your account is active, and afterwards only as needed to meet legal obligations, resolve disputes and enforce agreements. We honour Shopify’s mandatory data-request, customer-redaction and shop-redaction webhooks, so uninstalling the app or requesting erasure through Shopify propagates to us.

Passwords are hashed with Argon2id and checked against known breach corpora. Access tokens for your connected store and ad accounts are stored encrypted with Fernet. Tenant isolation is enforced by PostgreSQL row-level security, not by application code alone, so one customer’s data cannot be read while acting as another. Sessions use httpOnly cookies, multi-factor authentication is available, and sensitive actions are written to an append-only audit log. No method of transmission or storage is completely secure, but we work continuously to protect your information and to notify affected users of material incidents.

If you are in the European Economic Area, the United Kingdom, or a jurisdiction with similar protections, you have rights to access, correct, export, and delete your personal data, and to object to or restrict certain processing. Our lawful bases for processing include performance of our contract with you, your consent, and our legitimate interests in operating the Service. To exercise your rights, contact [email protected]. You also have the right to lodge a complaint with your local supervisory authority.

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses for such transfers.

Questions about this policy can be sent to [email protected].