Privacy Policy for Datadrew

Introduction

Datadrew respects your rights to privacy. Your ability to make informed choices about the use of your information is important to us. This Privacy Policy explains our policy regarding the collection, use, disclosure and protection of personal information we receive through your use of the Datadrew app (“the App”). It also sets out how you can contact us if you have any queries or concerns about this information. If not otherwise defined in this Privacy Policy, capitalized terms have the meaning given to them in our Terms of Service (the “Terms”).

The App enables you to aggregate and access information from e-commerce platforms such as Shopify (this platform and any additional platform we may add in the future will be referred to as “Platform(s)”) and third party websites and platforms, such as Facebook, Amazon and Google, which may contain information regarding the commercial operations of your business (such as inventory, sales, marketing budget and ROI). By using this aggregate information, we are able to give you an overview of your revenue, costs, and profits and, where you authorize it, make changes in, or take other actions through, your connected accounts on your behalf (together, “the Service”). Access to such information is subject to your consent, which will be obtained through the websites or Platforms’ interface.

Types of Information We Collect

When you install the App, we are automatically able to access certain types of information from your applicable Platform account:

• Store Properties — store setting, information and metadata as configured by store owner
• Products — data on all of your stores products including variants data and inventory details
• Orders — data on all orders made in your store
• Transactions — all records of money transfer between your store and your customers
• Customers — user data of all of your customers. Please note that you can request us not to collect or remove Customers’ data at any time at the following email address — support@datadrew.io. While you may still receive the Service even without this data, please note that some features may not be available if this data is not used.
• Facebook Marketing API — marketing statistics, advertising performance data, audience insights, Page engagement metrics, and related business information from your Facebook Marketing account
• Google Ads API — marketing statistics from your Google Ads Account
• Amazon Seller Partner API (SP-API) — orders, order items, seller feedback, financial events, and product catalog data from your Amazon Seller account. This data is used exclusively for your own account analytics.
• Amazon Ads API — campaign and performance reports from your Amazon Advertising account, used exclusively for your own account analytics.

“Personal Information” means information that can be directly associated with a specific person.

This Personal Information we collect as part of the App and the Service is:

• Name
• Email address
• Phone number

If you sign in using Google, we may collect your name, email and avatar from Google.

We also collect Personal Information when you contact us for any reason.

In addition, when you use the App, certain information may be automatically gathered about your computer, browser, operating system, IP address or mobile device.

To the extent that you provide Personal Information about individuals other than yourself, you certify that you have obtained their consent to the collection and use (including transfer and disclosure) of that Personal Information consistent with this Privacy Policy and, for any individuals not legally competent to give consent, you consent on their behalf and confirm that you have the authority to do so.

How We Use Information

We share Personal Information with the service providers that help us run the Service (the main ones are listed on our Sub-processors page) and as this Privacy Policy or the Terms otherwise describe. We will not otherwise share it with third parties without your explicit permission.

We may use the information we collect from you and your clients to provide you with our Service and for the following:

• Communicating with you — If you have contacted us, for any reason, we will use your information in order to further communicate with you.
• Acting on your instructions — Taking the actions you authorize in your connected accounts and keeping a record of them (see Actions in Your Connected Accounts).
• Verifying and authenticating the registration information provided by you.
• Conducting statistical and analytical purposes, intended to improve the Site.
• Inform you of additional products, services or promotions (unless you have opted out of receiving such communications).

By analyzing all information we receive, including all information concerning users, we may compile statistical information across a variety of users (“Statistical Information”). Statistical Information helps understand trends and user needs so that new products and services can be considered and so existing products and services can be tailored to user desires. Statistical Information does not indicate individuals’ identities, and we will not link Statistical Information to any Personal Information. We compile and share Statistical Information from data obtained from Third-Party Platforms only as each platform’s terms allow. Otherwise, we may share Statistical Information with our partners, without restriction, on commercial terms that we can determine in our sole discretion.

We use Google Analytics, which uses cookies to measure how the App is used. The Google Analytics Terms of Use and How Google uses information from sites or apps that use our services explain how Google collects and processes that data.

We may disclose information where the law requires or permits, to protect safety, to address suspected unlawful activity, to establish or defend legal claims, or to a successor in a merger, acquisition or sale of all or part of our business, subject to this Policy.

Artificial Intelligence (AI) Features & Sub-processors

The App includes AI-powered analytics features that use third-party AI model providers (“AI Sub-processors”) to process your requests and generate insights. Where these models are engaged, they access your data solely to provide these features, whether you start them or they run in the background. We engage them under written terms that require them to protect your data, and, under our terms with them, they do not use your data to train their models. Our main AI model providers are listed on our Sub-processors page, which we update when they change. Depending on what you ask, the data sent may include Personal Information such as your name, email, and customer-related data from your connected stores.

Records of AI activity. Our service providers keep records of our AI features’ activity, including conversations and the data those features read, to help us operate, fix and improve the Service, subject to this Policy’s platform-specific commitments.

Saved information. AI features may keep information, such as your preferences or facts about your store, for later use. To have it deleted, email support@datadrew.io.

WhatsApp. If you connect a WhatsApp number, we link it to your account and process your messages and our replies, including through our AI model providers, to answer your questions about your stores. We keep them with your AI conversations. They pass through Meta Platforms, Inc. and its affiliates; Meta says it keeps them for up to 30 days. They are not end-to-end encrypted the way personal WhatsApp chats are. WhatsApp’s own terms and privacy policy cover your use of WhatsApp.

Replies may include data from your connected stores, including customer-related data, and stay on your phone and in your backups, so connect only a number you control. You can disconnect at any time from your Datadrew account or on WhatsApp. To ask us to delete your number and these messages, email support@datadrew.io.

If you would prefer that we not process particular data through these AI features, please contact us at support@datadrew.io.

Actions in Your Connected Accounts

Where you authorize it, we use the permissions you grant to make changes in, or take other actions through, your connected accounts on your behalf. To do this, we and our AI and service providers (the main ones are listed on our Sub-processors page) process the data involved, such as the settings and content of the action and your account and store data. Where an action uses your customers’ personal data, that data passes through these providers, and we send it to the platform in the form its terms require.

We keep records of these actions, such as what was done, when and who authorized it, to operate the Service, support you and resolve disputes. We keep them as long as needed for these purposes, to comply with legal obligations, resolve disputes and enforce our agreements. The commitments in this Privacy Policy and our Terms for data from a specific platform continue to apply and prevail over this paragraph, and we may keep what the law and the platform’s terms allow to establish or defend legal claims. To ask us to delete these records, email support@datadrew.io.

You can end our access at any time by disconnecting the account or removing our access on the platform, or ask us to stop further actions by emailing support@datadrew.io. We act on emails within a reasonable time, and actions already under way may not stop. None of this undoes actions already taken.

How We Protect Information

We make efforts to follow generally accepted industry standards to protect Personal Information, both during transmission and once we receive it, including by keeping your Personal Information secure in a combination of secure computer storage, hard copy files and other records. However, you must realize that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

If we learn of a security breach that affects your data, we will tell you without undue delay, and tell the platforms whose data is affected and the authorities within the times their terms and the law require.

We will delete any Personal Information provided to us by a user upon the receipt of a written request by such user, except what we need to keep to comply with legal obligations, resolve disputes and enforce our agreements, subject to our commitments for data from a specific platform. We cannot restore information that we have deleted.

Website Visitor Identification

On our marketing website (datadrew.io), we use third-party website visitor identification services to understand which businesses are interested in our products and to support our business-to-business (B2B) sales and marketing. These services use cookies and your IP address to identify the company or organization associated with a visit and, where available, professional contact details (such as a name, business email address, or LinkedIn profile) associated with publicly available B2B data. We use this information solely to understand interest in Datadrew and to reach out to relevant businesses; we do not use it to build profiles for advertising or sell it to third parties.

These services operate only after you accept cookies through our cookie consent banner. If you decline, they are not activated.

You can opt out by declining when our consent banner appears, by clearing this site’s data in your browser (the banner then reappears), by adjusting your browser settings, or by contacting us at support@datadrew.io to request that we do not process information about your visit.

Our website also uses third-party analytics and marketing tools to measure visits.

For EU/UK Residents

Your Rights

If you are a European or UK resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below. You also have a right to lodge a complaint with the applicable data protection authority.

Additionally, if you are a European or UK resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe or the UK, as applicable, including to India, the United States and the countries listed on our Sub-processors page, under applicable legal mechanisms, in accordance with the relevant legislation.

Online Links to Other Sites or Applications

You can link to the websites of third parties that provide useful information/services. Any Personal Information you provide on the linked pages is provided directly to this third party and is subject to this third party’s provider’s privacy policy. We advise you check these privacy policies. We do not have access to the information collected by those third party websites or by our partners. Except as described in this Privacy Policy, we are not responsible for the content or privacy practices of third party websites to which we or our partners link.

Use of the App/Services by Children

You must be at least 18 years of age in order to use the App and/or Services. We do not knowingly collect personally identifiable information from children under the age of 13. In the event you become aware that somebody under the age of 13 has enrolled without parental permission, please inform us immediately.

Correcting or Updating Your Information

We allow you to view the information you provided during registration and to alter any data, inaccuracies or errors. To request such access, or correct, update, or amend your personal information please contact us at the following email address:

Email: support@datadrew.io

We will retain your information for as long as your account is active or as needed to provide you Services. If you wish to request that we no longer use your information to provide you Services, please contact us at the email address listed above. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

How Long Do We Keep Your Information?

Data obtained from authorized integrations with Meta technologies is retained as long as your account remains active, for the purpose of providing the Service. Upon account closure or receipt of a validated data deletion request, such data is permanently deleted from our systems within 30 days.

How to Request Deletion of Data Collected from Meta (Facebook Marketing)

If you wish to delete data collected from your connected Meta (Facebook Marketing) accounts, you may request deletion as follows:

• Remove the Datadrew app from your Facebook account’s Business Integrations section.
• Email us at support@datadrew.io using the subject line “Meta Data Deletion Request” from the email address associated with your Facebook account.

Once we verify your request, we will delete all associated Meta data from our systems within 30 days, except where retention is required by law.

Amazon Seller Partner API Data

Datadrew accesses Amazon Seller data through the Amazon Seller Partner API (SP-API). When you connect your Amazon Seller account, we access the following data types: orders and order items, seller feedback and ratings, financial events and settlements, and product catalog data.

Per-Seller Data Isolation: Your Amazon Seller data is used exclusively to provide analytics and insights for your own seller account. Your data is never aggregated with data from other sellers, shared with third parties other than service providers acting on our behalf, or used for any purpose other than providing the Service to you.

Data Security: All Amazon data is encrypted in transit and at rest and kept separate from other accounts’ data.

Data Retention & Deletion: Amazon Seller data is retained as long as your account remains active and the integration is connected. Upon account closure, integration disconnection, or receipt of a data deletion request, all Amazon data is permanently deleted from our systems within 30 days.

Revoking Access: You can revoke Datadrew’s access to your Amazon data at any time through your Amazon Seller Central account settings (under “Manage Your Apps”) or by emailing support@datadrew.io with the subject line “Amazon Data Deletion Request.”

Datadrew adheres to the Amazon Seller Partner API Acceptable Use Policy and Data Protection Policy.

Amazon Ads API Data

Datadrew accesses Amazon Advertising data through the Amazon Ads API. When you connect your Amazon Advertising account, we access the following data types: Sponsored Products campaign reports, Sponsored Brands campaign reports, Sponsored Display campaign reports, search term and keyword performance data, and metrics including impressions, clicks, conversions, ACoS, ROAS, and spend.

Per-Advertiser Data Isolation: Your Amazon Ads data is used exclusively to provide analytics and insights for your own advertising account. Your data is never aggregated with data from other advertisers, shared with third parties other than service providers acting on our behalf, or used for any purpose other than providing the Service to you. All Amazon Ads data is treated as confidential information belonging exclusively to the advertiser account to which it relates.

Data Security: All Amazon Ads data is encrypted in transit and at rest and kept separate from other accounts’ data.

Data Retention & Deletion: Non-PII Amazon Ads data is retained for no longer than 18 months in compliance with Amazon’s Data Protection Policy. Upon account closure, integration disconnection, or receipt of a data deletion request, all Amazon Ads data is permanently deleted from our systems within 30 days.

Revoking Access: You can revoke Datadrew’s access to your Amazon Ads data at any time through your Amazon Advertising console account settings or by emailing support@datadrew.io with the subject line “Amazon Ads Data Deletion Request.”

Transparency: Datadrew is clear and honest about what Amazon Ads data we access and for what purpose. We do not falsely represent or modify advertising data. Our Terms explain that AI-generated insights may be inaccurate, incomplete or not current.

Datadrew adheres to the Amazon Ads API License Agreement, Acceptable Use Policy, and Data Protection Policy.

Limited Use Disclosure

Our use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

We use the access you grant to Google services only to provide the Service to you. You can remove Datadrew’s access at any time from your Google Account permissions page. To ask us to delete data we received from Google, email support@datadrew.io.

If you connect Google Drive, we access only files you choose and files Datadrew creates there.

Our use of information received from Meta APIs adheres to Meta Platform Terms and the limited use requirements.

Communications

We may send you email, text and social media messages, or contact you via telephone calls or direct mail. By accepting the Terms and Conditions for the App or Services (including the terms of this Privacy Policy which are incorporated therein) or using the App or Services, you affirmatively consent to receive such commercial messages on an on-going basis throughout your use of the App or Services.

As a registered member, you can remove your personal information from our mailing list and stop receiving future communication from us by following the unsubscribe link located at the bottom of each communication or by emailing us at support@datadrew.io. Please note that we reserve the right to send you service related communications, including service announcements and administrative messages, without offering you the opportunity to opt out of receiving them unless you cancel your account.

We may contact you by the telephone number you provided us even if your telephone number is currently listed on any internal, corporate, state, federal or national Do-Not-Call (DNC) list. If you would rather not receive telephone calls from us, you may change or delete your number from your account preferences page(s), or ask to be removed from our contact list if you receive a call from us.

Changes

We may update this Privacy Policy from time to time and notify you by publishing an updated version on this page and changing the date above — we encourage you to review it periodically.

Comments, Questions or Complaints

If you have any comments or questions about our privacy policy, please contact us at support@datadrew.io.