Privacy Policy

1. Introduction

AdBridge ("we," "us," or "our") is a Shopify application that provides AI-powered advertising strategy and analytics intelligence for Shopify merchants. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install and use the AdBridge application ("App") through the Shopify platform.

By installing AdBridge, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described. If you do not agree, please uninstall the App.

For questions about this policy, contact us at dev@navegaid.com.

2. Information We Collect

2.1 Shopify Store Data

When you install AdBridge, you authorise us to access certain data from your Shopify store through the Shopify Admin API, used solely to provide the AdBridge service:

• Product information — titles, categories, pricing, and cost of goods sold (COGS)
• Inventory data — stock levels and quantity per variant across all locations
• Sales analytics — order volume, revenue, and product-level sales data for the past 30 days
• Store metadata — store name, currency setting, and timezone

We do not access, store, or process your end-customers' personal information such as names, email addresses, or payment details through AdBridge.

2.2 App Usage Data

We may collect information about how you interact with AdBridge, including features accessed, session duration, frequency of use, and error logs for maintaining service reliability.

2.3 Account Information

When you install AdBridge, we receive your store's Shopify domain and the merchant email address associated with your Shopify account, used for authentication, billing, and service communications.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service delivery — to provide, operate, and maintain the AdBridge App
• AI strategy generation — to transmit selected store analytics to our AI processing partner and return campaign strategy recommendations
• Service improvement — to understand how the App is used and improve features and performance
• Support and communications — to respond to enquiries and deliver service-related notices
• Security and integrity — to detect, prevent, and address fraud, abuse, or technical issues
• Legal compliance — to comply with applicable laws and Shopify Partner Program requirements

4. AI Processing — Third-Party Disclosure

AdBridge uses the Claude AI API, operated by Anthropic PBC ("Anthropic"), to generate campaign strategy recommendations. When you click "Generate Strategy," the following data is transmitted to Anthropic's API:

• Aggregated store metrics — total revenue, order volume, and average order value
• Selected product data — product names, revenue figures, sell rates, stock levels, and margin tiers for checked products
• Selected advertising channels — e.g., Meta Ads, TikTok Ads

Strategy outputs are session-based and are not stored on AdBridge servers after your session ends. We do not transmit customer personally identifiable information or payment data to Anthropic. Anthropic's data handling is governed by their Privacy Policy at https://www.anthropic.com/privacy.

By using the Strategy AI feature, you consent to the transmission of the above-described store analytics data to Anthropic for the purpose of generating strategy recommendations.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your information to third parties. We may share information only in the following limited circumstances:

5.1 Service Providers

Trusted third-party service providers who assist in operating AdBridge, all contractually obligated to protect your data:

• Anthropic PBC — AI processing for the Strategy AI feature
• Cloud infrastructure and hosting providers — for app hosting, storage, and delivery
• Monitoring and error-tracking services — for maintaining app reliability

5.2 Shopify Platform

AdBridge complies with Shopify's Partner Program requirements and API usage policies. Data accessed via the Shopify Admin API is used exclusively as permitted by those terms.

5.3 Business Transfers

If AdBridge is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you if such a transfer materially changes how your data is handled.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or where necessary to protect the rights, property, or safety of AdBridge, our users, or the public.

6. Advertising Platform Integrations

The current version of AdBridge (Phase 1) does not connect to or store data from third-party advertising platforms, including Meta Ads, TikTok Ads, or Google Ads. All strategy generation is based solely on your Shopify store data.

Future versions may include optional, opt-in advertising platform integrations. This Privacy Policy will be updated accordingly when such integrations are introduced.

7. Data Retention

We retain your data according to the following schedule:

• Store analytics data — retained only for the duration of your active AdBridge subscription
• AI strategy outputs — session-based only; not stored on our servers after your session ends
• App usage logs — retained for up to 90 days for diagnostics, then deleted
• Account information — retained for the duration of installation plus 30 days after uninstallation

Upon uninstallation, we will delete all associated store data from our systems within 30 days, except where retention is required by law.

8. Data Security

We implement commercially reasonable technical and organisational security measures, including:

• Encrypted transmission of all data using HTTPS/TLS protocols
• API credentials stored exclusively as server-side environment variables — never exposed in client-side code
• Access controls limiting data access to authorised personnel only
• Regular security reviews and dependency updates

No method of electronic transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

9. Your Rights

Depending on your location and applicable law, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data, subject to legal retention requirements
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain types of processing, including direct marketing
• Restriction — request restricted processing in certain circumstances

To exercise these rights, contact us at dev@navegaid.com. We will respond within 30 days and may require identity verification.

10. GDPR — European Economic Area

If you are located in the EEA, UK, or Switzerland, your personal data is protected by the GDPR or equivalent legislation. Our legal basis for processing your store data is performance of contract (Article 6(1)(b) GDPR). For usage analytics, we rely on legitimate interests (Article 6(1)(f) GDPR).

AdBridge acts as a data processor in relation to any personal data you control within your Shopify store. You remain the data controller for your customers' personal data. AdBridge does not access or process end-customer personal data.

If you have unresolved concerns, you have the right to lodge a complaint with your local data protection authority.

11. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. AdBridge does not sell or share personal information. We do not discriminate against you for exercising your California privacy rights.

12. International Data Transfers

AdBridge may process and store data on servers outside your country of residence. Data transmitted to Anthropic's Claude API may be processed in the United States. By using AdBridge, you consent to the transfer of your information to countries that may have different data protection laws than your country.

Where required by applicable law (e.g., GDPR transfers outside the EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

13. Children's Privacy

AdBridge is a business tool intended solely for use by adult merchants. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected information from a minor, we will delete it promptly.

14. Cookies and Tracking

AdBridge operates as a Shopify embedded app and does not place independent tracking cookies on your browser. Authentication and session management are handled through Shopify's App Bridge framework using Shopify's own session tokens.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy within the AdBridge App with a revised "Last updated" date
• Sending a notification to the merchant email address associated with your Shopify account

Your continued use of AdBridge after the effective date of the revised policy constitutes acceptance of the changes. If you do not agree, please uninstall the App.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us. We aim to respond to all privacy-related enquiries within 5 business days. For urgent data breach notifications, we will respond within 72 hours.