Privacy Policy

AdCohort · Last Updated: December 31, 2025

1. What This App Does

AdCohort helps Shopify merchants analyze customers and export lists for advertising platforms (Facebook, Google, TikTok).

2. Data We Do NOT Store

Your customer data stays private:

• No customer names
• No customer emails
• No customer phone numbers
• No customer addresses
• No purchase history

Why? All customer data is processed in your browser only. We never write it to our database.

3. Data We Store (Your Shop Only)

• Authentication: Your Shopify shop info and access token (required to connect)
• Subscription: Your plan and billing status
• Usage: Monthly counters for plan limits
• Preferences: Your app settings

4. Shopify API Access

We request read-only access:

• read_customers: To fetch customer data for analysis
• read_orders: To analyze order patterns

Read-only means we cannot modify or delete anything in your store.

5. How Customer Data is Processed

When you view cohorts or export lists:

• Our server fetches customer data from Shopify API
• Data is sent directly to your browser
• All analysis and CSV generation happens in your browser
• Data is never written to our database
• Data is discarded when you close the tab

6. Security

• Encryption in Transit: All connections use HTTPS/TLS
• Encryption at Rest: Database stored on encrypted AWS EBS volume (AES-256)
• Encrypted Backups: Daily backups encrypted with AES-256
• Network Security: Database not exposed to internet

7. Data Sharing

We do not sell or share your data with third parties.

The only data sharing:

• Shopify: We communicate with Shopify's API (required for app functionality)
• AWS: Our infrastructure is hosted on AWS (encrypted storage)

When you export customer lists, the CSV is generated in your browser. We never see the export.

8. Data Retention and Deletion

Customer Data: Not stored (zero retention)

Your Shop Data: Automatically deleted within 48 hours after you uninstall the app

Backups: Encrypted backups retained for 90 days for disaster recovery

9. Your Rights

• Access: Request a copy of your shop data by emailing contact@adcohort.digital
• Delete: Uninstall the app (automatic deletion within 48 hours)
• GDPR/CCPA: Since we don't store customer data, there's nothing to export or delete

10. Automated Decision-Making

AdCohort automatically categorizes customers into cohorts based on spending and order patterns. You can opt out and manually review cohorts before exporting. This profiling is for marketing analysis only and has no legal effects on customers.

11. GDPR Compliance

We handle Shopify's mandatory webhooks:

• customers/data_request: Confirms no customer data stored
• customers/redact: Confirms no customer data to delete
• shop/redact: Deletes all your shop data within 48 hours

12. About the Developer

AdCohort is developed and maintained by an individual developer. I'm committed to protecting your privacy and complying with all applicable laws (GDPR, CCPA, Shopify requirements).

13. Changes to This Policy

If this policy changes, the "Last Updated" date above will be updated. Continued use means you accept the changes.

14. Contact

Email: contact@adcohort.digital

Website: app.adcohort.digital

Data Protection Agreement: app.adcohort.digital/dpa