Privacy Policy

Information we collect

We collect account information you provide (such as your name and email), billing information processed by our payment provider, and ecommerce and advertising data you authorize us to access through connected integrations.

• Account and profile details
• Connected platform data (Shopify, Meta Ads, Google Ads, GA4)
• Usage and audit-log data about actions taken in your account

How integrations work

Connections to third-party platforms are brokered through Windsor.ai. We store only a connection identifier and never your platform access tokens. All data syncs happen server-side, and your platform credentials are never exposed to the browser. Our integrations are read-only — we never make changes to your store or advertising accounts.

How we use data

We use your data to provide the service: to unify and analyze your metrics, generate recommendations and reports, and operate and secure your account. We do not sell your data, and we do not share it except with the service providers required to operate the platform.

Data retention

Aggregated reporting data is retained according to your plan — 90 days on Essentials and 365 days on Growth AI. Raw source data is retained for up to 12 months. You can request deletion at any time.

Security

Data is encrypted in transit and at rest. We apply strict security headers, same-origin protections on state-changing requests, and access controls on authenticated routes.

Your rights

You can access, export, or request permanent deletion of your organization's data. See our GDPR page for more on how to exercise these rights.