1. Introduction

Omni Target ("we," "our," or "the App") provides AI-powered pre-spend intelligence to e-commerce merchants using Shopify. This Privacy Policy explains what data we access, how we store and use it, and your rights regarding that data when you install and use the App within your Shopify store environment.

2. Information We Collect via Shopify API

When you install the App and connect your store, we access the following via Shopify's OAuth framework:

Store and Account Data: Store name, store email, domain, currency, and Shopify access/refresh tokens required to maintain the connection.
Order and Product Data: A snapshot of your store's order history, product catalog, and sales performance data, including order sequencing information (e.g., which products were purchased by first-time buyers), used to compute gateway product classifications and generate Campaign Briefs. This snapshot may include data associated with individual customer orders as recorded in your Shopify store.
Contact Information: Information you provide during account setup or support communications.
Advertising Platform Data: If you connect a Meta Ads account, we access your ad account ID, pixel ID, business ID, and associated access tokens to support campaign brief generation and, where applicable, performance tracking.

We do not use individually-identifiable customer data from your store to build customer profiles, and we do not sell customer or store data to third parties.

3. How We Use Your Information

We process store and order data to:

Generate Campaign Briefs, including gateway product identification, targeting recommendations, and ad budget guidance.
Operate and maintain your account dashboard.
Improve our internal models using aggregated and/or de-identified data across our merchant base.

4. Data Storage and Retention

Your store snapshot, including order and product data, is stored in our systems and refreshed each time your store reconnects or resyncs. This snapshot is retained — and is retrievable by us — from the time of connection until it is overwritten by a subsequent sync or deleted upon uninstallation. It is not deleted immediately after each computation. If your store remains connected without resyncing, the most recent snapshot remains stored on our systems for that period.

5. Shopify Mandatory Webhooks and Data Erasure

We comply with Shopify's Mandatory Privacy Webhooks:

Shop Data Erasure (shop/redact): Upon uninstallation, your store snapshot and associated account data are deleted from our production database within 48 hours of receiving the webhook.
Customer Data Erasure (customers/redact): Any customer-linked order data contained within your store snapshot is deleted as part of the same erasure process described above. We do not maintain separate individual customer profiles outside this snapshot.
Customer Data Requests (customers/data_request): We will inform Shopify and cooperate with any merchant request regarding whether customer-linked order data was processed in generating your Campaign Briefs.

6. Third-Party Sharing

We do not sell your data. We share data only with:

Infrastructure providers (database hosting, cloud compute) necessary to operate the App, bound by confidentiality and data processing agreements.

7. Security

We apply access controls and encryption provided by our infrastructure providers to protect stored data, including store access tokens.

8. Your Rights

Depending on your jurisdiction, you (or your customers, via you as data controller) may have rights to access, correct, or request deletion of data processed by the App. Requests can be made via Shopify's data request mechanisms or by contacting us directly at hello@omnitarget.co.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email/in-app notice.

10. Contact Us

For privacy or data access questions, contact us at hello@omnitarget.co.