Privacy Policy

EcomOS by Ecommerce Academy · Last updated 2 July 2026

EcomOS ("the App", "we", "us") is a growth-tracking and analytics dashboard for ecommerce merchants, operated by Ecommerce Academy. This policy explains what data the App collects, why, and how you can have it deleted.

Data we collect

• Account information — your name, email address and business name, provided when you create an EcomOS account.
• Shopify store data — when you connect your Shopify store, we access your store's order totals, line items, product and inventory information to calculate your revenue, average order value, cost of goods, profit and repeat-purchase analytics. We do not collect your customers' names, email addresses, phone numbers or street addresses.
• Meta (Facebook) advertising data — when you connect your Meta ad account, we access your own ad account's performance metrics (spend, impressions, clicks, conversions, return on ad spend and creative performance) to display them in your dashboard. We do not access your personal Facebook profile, friends, or content.

How we use it

Data is used solely to provide the App's features to you: your private performance dashboard, daily metric tracking, and AI-assisted analysis of your own business. We do not sell, rent, or share your data with third parties for their own purposes, and we do not use it for advertising.

Storage and security

Data is stored on Google Cloud Platform, encrypted in transit (TLS) and at rest. Access is limited to your account and Ecommerce Academy coaching staff supporting you.

Retention and deletion

• Shopify — uninstalling the App triggers Shopify's data-deletion webhooks and we delete your store's synced data (orders, metrics and connection) automatically.
• Meta — removing the App in your Facebook settings and requesting deletion triggers Meta's data-deletion callback and we delete your ad-account connection and synced ad data automatically, with a confirmation code you can check.
• You can also disconnect either integration inside the App at any time, or email us to request full deletion of your account and data.

Your rights

You may request a copy of your data, corrections, or full deletion at any time by contacting us at the address below. We respond within 30 days.

Security incidents

We maintain a security incident response process: continuous request logging and audit trails for detection; immediate containment (credential revocation, access isolation) on discovery; assessment of scope and affected data; notification of affected merchants and the relevant platform (e.g. Shopify) without undue delay and within 72 hours of confirming an incident involving their data; remediation; and a post-incident review. Production data is protected by encrypted daily backups and point-in-time recovery.

Government data requests

If a public authority requests user data, we review each request for legal validity before responding, challenge requests we consider unlawful, disclose only the minimum information necessary to comply with a valid request, and document all such requests, our responses, and the legal basis involved. We have received no such requests to date.

Contact

Ecommerce Academy — brendan@exstatic.net
ecomacademy.co · Terms of use: ecomacademy.co/terms-of-use