Security
Security & data
Your data is yours, including what we derive from it.
- Access
- Read-only connections: GA4 via analytics.readonly; Shopify read-only. It can look, never touch. Verify it yourself at the consent screens.
- AI processing
- Subprocessors include OpenAI. No personally identifiable information goes to AI providers, and they may not train on your data.
- Isolation
- One account per client brand. No cross-account anything.
- Retention
- Kept only as long as needed; then deleted, destroyed, or de-identified.
- Consent
- Consent Mode v2, IP anonymization, nothing fires without your consent category.
We are not yet SOC 2 certified. This page documents our safeguards exactly as they are, and this line changes the day the status does.
Data privacy officer: Bjorn Espenes.