Privacy Policy

Last updated: April 17, 2026

Strada Ads (“we”, “us”) builds and deploys Meta (Facebook/Instagram) ad campaigns for Shopify merchants. This policy explains what we collect, why, and your rights.

1. What we collect

• Shop data — your myshopify.com domain, OAuth access token, the Shopify-granted scopes, and timestamps.
• Product catalog — product titles, descriptions, images, and prices, read via Shopify Admin API, solely to generate ad copy and creative.
• Campaign data — the ads you generate: headlines, body copy, targeting, budget.
• Meta integration (optional) — if you connect Meta, we store your Meta user id, ad account id, and a short-lived access token to deploy campaigns on your behalf.
• Billing — plan selection is handled by Shopify’s Billing API. We do not see or store payment card data.

2. What we don’t collect

We do not read individual customer PII. Shopify’s protected customer-data scopes are not requested.

3. How we use data

• To generate ad copy and creative using large language models (Anthropic Claude). Product data is sent in prompts; no persistent training.
• To create and manage Meta ad campaigns at your instruction.
• To provide billing, support, and service analytics.

4. Sub-processors

• Anthropic, PBC — ad copy generation.
• Supabase, Inc. — database/storage.
• Netlify, Inc. — hosting.
• Meta Platforms, Inc. — campaign deployment (only if you connect Meta).
• Shopify Inc. — authentication and billing.

5. Data retention & deletion

We honor Shopify’s mandatory GDPR webhooks:

• customers/data_request — we provide any data we hold within 30 days.
• customers/redact — logged for audit; we store no customer PII.
• shop/redact — 48 hours after uninstall, all shop data is deleted.

6. Your rights

You may request access, correction, export, or deletion of your data by emailing privacy@stradaads.com. Uninstalling the app from your Shopify admin triggers deletion within 48 hours.

7. Security

All data is transmitted over TLS and stored in encrypted databases. OAuth tokens are scoped to the minimum permissions required and rotated on re-install.

8. Changes

We post material changes here and notify installed merchants by email at least 14 days before they take effect.

9. Contact

Strada Ads · privacy@stradaads.com