shopAds

shopAds Privacy Policy

Effective date: 14 July 2026

1. Who we are

shopAds is a service that automates online advertising for Shopify merchants. Once a merchant connects their Shopify store and their product listing account, shopAds provisions and operates the advertising account and the analytics property needed to serve them, builds, runs, and optimises their advertising campaigns on their behalf, and charges a management fee based on the revenue those campaigns generate.

This Privacy Policy explains how shopAds LLC (“shopAds”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data. It applies to our website at shopads.ai, our application at app.shopads.ai, and the shopAds Shopify app.

shopAds LLC is a limited liability company registered in Wyoming, United States. If you have any questions about this policy or how we handle personal data, contact us at help@shopads.ai.

2. The two roles we act in

We handle personal data in two distinct capacities, and your rights depend on which applies.

When we handle a merchant’s own account information, for example the details used to sign up, authenticate, and be billed, we act as a data controller. We decide how and why that information is used.

When we handle information about a merchant’s customers and the visitors to a merchant’s store, we act as a data processor on that merchant’s behalf. The merchant is the controller of that information, and we process it only to provide the shopAds service to them and under their instructions. If you are a shopper on a store that uses shopAds and you want to exercise your rights over your personal data, your first point of contact is the merchant whose store you shopped on. We assist merchants in responding to those requests. How these roles are allocated in detail is set out in our Controller and Processor Split.

3. Information we collect

From merchants

  • Account and contact details, such as name, email address, business name, and country, provided at sign up or captured through the sign in.
  • Billing information needed to charge the management fee. Card details are captured and stored by our payment processor. We store references to your customer and payment method and your mandate, not your full card number.
  • Your chosen billing and display currency, and your account preferences.

From your connected accounts, and the accounts we operate for you

When you authorise shopAds, you grant us access to your product listing account and to your Shopify store, and we provision and operate a separate advertising account and a separate analytics property for you within our own accounts. Using that access we manage your advertising, product listings, and related analytics in order to run and optimise your campaigns, and we access your store’s products, orders, and customer records, along with the tracking, consent, and inventory data needed to run and measure campaigns. We store the resulting access credentials in encrypted form. From your customer records we access the name and email fields, which we use for audience targeting as described below.

From the customers and visitors of a merchant’s store

Acting as processor for the merchant, we process order details, the customer name and email fields, a click identifier that links an ad click to a resulting order, and session and behavioural data from analytics we operate. All of this collection is gated by each visitor’s consent, as described in section 10.

From visitors to shopads.ai

When you visit our website we collect standard technical information such as your IP address, browser type, and pages viewed, through cookies and similar technologies, to operate and improve the site.

4. How we use information

We use personal data to:

  • Provide, operate, and optimise the merchant’s advertising, including improving product information, selecting and prioritising which products to advertise, building and managing campaigns, measuring conversions, and audience targeting.
  • Use customer name and email for audience targeting in the merchant’s own campaigns, both to reach new customers and to tailor who is shown ads.
  • Calculate and charge the management fee, which is based on the advertising revenue we generate, and handle billing, settlement, and any disputes.
  • Provide the merchant dashboard and respond to support enquiries.
  • Operate, secure, maintain, and improve our website and service, and comply with our legal obligations.

We process personal data only for the purposes described in this policy, and only the minimum personal data needed to provide the service.

5. Information received from Google APIs

shopAds’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use the data we access through your Google account only to provide and improve the shopAds service to you, we do not sell it, we do not use it for advertising unrelated to your own campaigns, and we do not use it to train generalised or foundation artificial intelligence models. Human access to this data is limited to the narrow circumstances the Limited Use requirements permit, such as with your consent, for security purposes, to comply with the law, or where the data has been aggregated and anonymised.

6. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases. For merchant account data, we rely on the performance of our contract with the merchant, and on our legitimate interests in operating and securing our service. For processing a merchant’s customer data, the merchant is the controller and is responsible for the legal basis; we process it under our contract with the merchant. Where consent is required, for example for certain advertising and analytics cookies in regulated regions, we and the merchant rely on the consent collected from the visitor.

7. How we share information

We do not sell personal data. We share it only as needed to provide the service, with the following categories of recipient:

  • Google, so we can run advertising, product listings, and analytics on the merchant’s behalf, including within the advertising account and the analytics property that we provision and operate for the merchant inside our own Google accounts. Where we engage Google to process a merchant’s customer data in those accounts, we do so as the merchant’s processor and Google acts as our sub-processor, except where Google processes that data for its own purposes under its own terms, in which case it acts as an independent controller for that processing.
  • Our payment processor, to capture the fee authorisation and process the management fee charges.
  • Shopify, the platform our app operates on.
  • Our cloud hosting and database providers, which store and run our application and data on our behalf under confidentiality and data protection obligations.
  • Our banking and settlement providers, to receive and hold fee revenue and convert currency.
  • Third party artificial intelligence service providers, which we use to process product and account data for enrichment and support. They process this data only to perform those functions for us, and do not use it to train their own models.

We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a business transfer such as a merger or acquisition.

If we engage new categories of provider, or add advertising channels in the future, we will update this policy accordingly.

8. International data transfers

shopAds is operated from outside the European Economic Area, and our service providers may process data in the United States and other countries. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. By using the service or submitting information, you understand that your information may be processed in countries whose data protection laws may differ from those of your own country.

9. Data retention

We keep personal data only for as long as it is needed for the purposes described in this policy. Merchant account and campaign data is retained while the merchant is a customer. When a merchant uninstalls the shopAds app or closes their account, we delete or anonymise the personal data we hold as processor for that store within 30 days, except where we are required to retain certain records, for example billing records, to meet legal, accounting, or tax obligations. The period we keep each category of personal data for, and why, is set out in our Data Retention Schedule.

10. Consent and visitors in regulated regions

For visitors in the European Economic Area, the United Kingdom, and Switzerland, tracking and advertising measurement are gated by each visitor’s consent. We read the consent state that the merchant’s store collects and apply it to the advertising and analytics we run, so that for a visitor who has not consented, personal data is not collected or used for advertising or analytics. It is the merchant’s responsibility to collect valid consent from their visitors, and we help merchants enable consent collection where their store does not already have it.

11. How we protect information

We apply security measures appropriate to the sensitivity of the data, including encryption of data in transit and at rest, additional application layer encryption of the credentials that connect to your accounts, strict limits on who can access personal data, access logging, separation of test and production data, and encrypted backups. No method of transmission or storage is completely secure, but we work to protect personal data against unauthorised access, loss, and misuse.

12. Your rights

Depending on where you live, you may have rights over your personal data, including the right to access it, correct it, delete it, restrict or object to its processing, receive a copy of it in a portable form, and withdraw consent. Where the California Consumer Privacy Act as amended applies, you have the right to know what personal information we hold, to request its deletion, to correct it, and to opt out of its sale or sharing. We do not sell personal information.

To exercise your rights over merchant account data, contact us at help@shopads.ai. If you are a shopper on a store that uses shopAds, please contact the merchant whose store you shopped on, since they control that data; we will assist the merchant in responding, including honouring deletion and data requests that reach us through the store platform. You also have the right to lodge a complaint with your local data protection authority.

13. Cookies

Our website at shopads.ai uses cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used. You can control cookies through your browser settings. The advertising and analytics measurement on merchant stores is governed by the consent process described in section 10.

14. Children

shopAds is a business to business service and is not directed at children. We do not knowingly collect personal data from children.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top and, where appropriate, notify merchants. Your continued use of the service after an update means you accept the revised policy.

16. Contact us

For any questions, requests, or complaints about this Privacy Policy or our handling of personal data, contact us at help@shopads.ai.