Privacy Policy
This policy explains what information the AdsPilot AI Shopify app ("the App", "we", "us") collects when a merchant installs and uses it, how we use it, and the choices merchants have. It applies to the App and to the services that run it.
1. Who this applies to
The App is used by Shopify merchants to connect a Google Ads account, view campaign performance, and create and optimize Google Ads campaigns with AI assistance. The App does not interact with a merchant's shoppers and does not collect personal information about them.
2. Information we collect
| Category | What | Why |
|---|---|---|
| Shopify store information | Store domain (for example store.myshopify.com), the access token Shopify issues to the App, and the status of your App subscription plan. | To authenticate you inside Shopify admin, identify your account, and apply the features of your plan. |
| Google Ads connection | An OAuth refresh token for the Google Ads account you choose to connect, and the selected Google Ads customer ID. | To read campaign data and make the campaign changes you request. |
| Google Ads performance data | Campaign, ad group, keyword and search term names and metrics (clicks, impressions, cost, conversions) for the connected account. | To show dashboards and generate optimization recommendations. |
| Content you provide | Settings, campaign drafts, and landing page URLs you ask the App to analyze. | To generate campaign and ad copy suggestions. |
| Technical logs | Request timestamps, error messages, and store domain. | Security, debugging and abuse prevention. |
We do not collect or store your shoppers' names, email addresses, addresses, phone numbers, payment details or order histories. The App does not use cookies for tracking or advertising.
3. Google user data
When you connect Google Ads, the App requests the Google Ads scope (https://www.googleapis.com/auth/adwords) only. We use the data received from Google APIs solely to provide the App's Google Ads features to you. AdsPilot AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except with your consent, for security purposes, or where required by law. You can revoke access at any time from inside the App or at myaccount.google.com/permissions.
4. How we use AI
To generate recommendations and ad copy, the App sends campaign metrics, keyword and search term text, and landing page content to Google's Gemini API. This data does not include shopper personal information. We do not use your data to train our own models.
5. Sharing
We do not sell or rent your information. We share it only with service providers that run the App on our behalf:
- Hetzner Online GmbH (Germany): server hosting and database.
- Google: the Google Ads API (at your direction) and the Gemini API (AI processing).
- Shopify: authentication and billing.
We may also disclose information if required by law or to protect the rights and safety of our users.
6. Security
All traffic uses HTTPS. Google OAuth refresh tokens are encrypted at rest with AES-256-GCM. Requests between the App's components are signed and verified. Access to production systems is restricted to authorized personnel.
7. Retention and deletion
- Performance data is kept for the period included in your plan (7, 30 or 90 days) and is then deleted automatically.
- When you uninstall the App, your Google Ads connection is disconnected. Shopify then sends us a shop/redact request, and we permanently delete all data associated with your store.
- You can request deletion or a copy of your data at any time by emailing us.
8. Your rights
Depending on where you are located (for example under the GDPR, UK GDPR or CCPA), you may have the right to access, correct, delete or export your information, and to object to or restrict processing. To exercise these rights, contact us using the details below. We respond within 30 days. You may also lodge a complaint with your local data protection authority.
9. International transfers
Data is stored in the European Union (Germany). Where data is transferred to service providers outside the EU, such as Google, those transfers rely on appropriate safeguards such as Standard Contractual Clauses.
10. Children
The App is a business tool and is not directed to anyone under 16.
11. Changes
We will post any changes to this policy on this page and update the date above. Material changes will also be announced inside the App.
12. Contact
Tamsar, Inc.
Email: atanrikulu@e-listele.com