Privacy Policy

Controller contact for privacy requests: privacy@ecomboostai.com (or support@ecomboostai.com).

Account data: name, email, password hashes / auth provider IDs, workspace role, and support messages.

Billing data: processed by Stripe (payment method details, billing address, tax IDs when provided). We receive limited billing metadata (e.g. customer ID, plan, invoice status), not full card numbers.

Connected platform data: when you authorize Shopify, Meta, TikTok, or similar integrations — store catalog, orders, analytics, ad accounts, and related metadata needed to run the features you use.

Usage & device data: logs, IP address, browser type, pages viewed, feature usage, crash/diagnostic data, and cookies as described in our Cookie Policy.

Content you submit: prompts, uploads, generated drafts you save, and similar inputs.

We use personal data to:

• Provide, secure, and improve the Service
• Authenticate users and manage workspaces
• Sync and act on connected stores/ad accounts as you instruct
• Generate AI outputs you request
• Process subscriptions, taxes, and invoices
• Send transactional email (receipts, security, product notices)
• Detect abuse, fraud, and security incidents
• Comply with law and enforce our Terms

We do not sell personal information.

Where GDPR / UK GDPR applies, we process data under one or more of:

• Contract — to provide the Service you request
• Legitimate interests — security, product improvement, fraud prevention
• Consent — cookies/analytics where required, and optional marketing
• Legal obligation — tax, accounting, and compliance

We share data with:

• Processors that help run the Service (hosting, database, email, analytics, AI model providers, error monitoring)
• Stripe for payments and tax
• Platforms you connect (Shopify, Meta, TikTok, etc.) when you authorize actions
• Professional advisors or authorities when required by law or to protect rights

Processors are bound by contractual confidentiality and data-protection obligations where applicable.

We and our processors may process data in the United States and other countries. For transfers from the EEA, UK, or Switzerland, we use appropriate safeguards such as Standard Contractual Clauses where required.

We retain account and billing records for as long as your account is active and as needed for legal, tax, and dispute purposes. Store sync data is retained while integrations remain connected and for a reasonable period after disconnect to support recovery and audits, unless you request earlier deletion where feasible.

We use administrative, technical, and organizational measures designed to protect personal data (encryption in transit, access controls, secrets management). No method of transmission or storage is 100% secure.

Depending on where you live, you may have rights to access, correct, delete, or export personal data; object to or restrict certain processing; withdraw consent; and lodge a complaint with a supervisory authority (GDPR / UK GDPR and similar laws).

To exercise rights, email privacy@ecomboostai.com. We may need to verify your identity. Some requests may be limited where we must keep data for legal reasons or where it would affect others' rights.

The Service is not directed to children under 16 (or higher age required locally). We do not knowingly collect personal data from children. If you believe a child provided data, contact us to delete it.

Prompts and store context you provide may be sent to AI subprocessors to generate results. Do not submit sensitive personal data you are not authorized to process. You remain responsible for lawful use of outputs on your store and ads.

We may update this policy by posting a new version with a revised date. Material changes may be highlighted in-product or by email when appropriate.

Terms of Service · Cookie Policy · Refunds & Billing