Last updated: 28 June 2026
Ad Pilot ("the App", "we", "us") is a profit-aware Google Ads analytics app for
Shopify. This policy explains exactly what data the App accesses, how it is used,
how long it is kept, and your rights. It is written to be specific to what this App
actually does — not boilerplate.
The merchant who installs Ad Pilot is the data controller for their store's data;
Ad Pilot acts as a data processor on their behalf for the limited data described
below. Questions about data handling:
support@adpilot.syncerp.work
Ad Pilot is classified at Protected Customer Data (PCD) Level 0. It requests
no Shopify access scopes that grant customer or order data — in fact it requests
no Shopify data scopes at all. It cannot read your products, orders, or
customers. There is therefore no customer personal data flowing through the App from
Shopify.
Shopify access scopes requested: *(none)* — only the standard app-install / OAuth
session needed to embed the app in your admin.
We explicitly do not request read_orders, read_customers, read_products,
or any other data scope.
| Data | Source | Why | Stored? |
|------|--------|-----|---------|
| Shop domain, shop id, app install/uninstall state | Shopify OAuth | Identify your store, manage your session and subscription | Yes |
| Offline access token (Shopify) | Shopify OAuth | Keep your embedded session valid | Yes — AES-256-GCM encrypted at rest |
| Your Google Ads OAuth token | You connect via Google OAuth | Read your own aggregate ad metrics | Yes — encrypted at rest; read-only Google Ads scope |
| Aggregate Google Ads metrics (spend, conversions, conversion value, impressions, clicks, search terms, budget-lost impression share) | Your connected Google Ads account | Compute break-even, profit, anomalies, waste | Yes — aggregate only, no personal data |
| Economics you type in (average order value, gross margin, per-order variable cost) | You enter them in the app | The basis for every profit calculation | Yes |
| Billing / subscription status | Shopify Billing API | Manage your plan | Yes |
| Webhook event ids + operational logs | Shopify webhooks / app runtime | Idempotency, debugging, abuse prevention | Yes (event ids); logs are short-lived and contain no customer PII |
We do not store any customer names, emails, phone numbers, addresses, payment
details, or order contents — we never receive them.
We do not sell your data, use it for advertising, or share it except with the
sub-processors listed below, strictly to provide the service.
syncerp.work domain (operated by us). Data is stored in a PostgreSQL database
and Redis on that host.
connection you authorize. Read-only.
are pure math and use no AI. If a future optional AI feature (e.g. ad-copy
suggestions) is enabled, only the non-personal text you submit for that feature is
sent to Anthropic under a zero-retention posture; no customer PII is involved.
We do not transfer protected customer data to any sub-processor, because we do not
hold any.
app/uninstalled webhook and we mark your shop inactive. About 48 hours later Shopify sends a shop/redact webhook, on which we
cascade-delete all rows for your shop (shop record, tokens, economics, ad
accounts, metrics, anomalies, search terms, billing).
customers/data_request and customers/redact webhooks areanswered truthfully: Ad Pilot holds no customer data to return or redact.
Because Ad Pilot holds no customer personal data, the rights below apply to the
merchant account data and economics you provide:
format.
You also have the right to lodge a complaint with your local data-protection
authority.
Access tokens (Shopify offline token and your Google Ads OAuth token) are encrypted
at rest with AES-256-GCM. Transport is over HTTPS/TLS. Webhooks are HMAC-verified.
Access is least-privilege (PCD Level 0, no data scopes).
We will update this page and the "Last updated" date when our data practices change.
Material changes affecting how your data is handled will be surfaced in-app.