🇮🇹 Italiano · 🇬🇧 English
Privacy Policy — AdPilot
Last updated: 03/07/2026
Privacy contact: jasoncurro31399@gmail.com
1. Who we are and what AdPilot does
AdPilot is an embedded Shopify application that helps merchants simulate, generate and optimize Meta (Facebook/Instagram) advertising campaigns using an artificial intelligence model. The app installs on the merchant's Shopify store and runs inside the Shopify admin.
This policy describes what data we process, why, who we share it with, and your rights. It concerns the merchants who install the app; we do not collect personal data about the store's end customers (see §3).
2. Data we process
| Category | Examples | Source |
|---|---|---|
| Store identifiers | *.myshopify.com domain, installation ID, session/access token | Shopify (during installation/OAuth) |
| Catalog data (read-only) | product title, description, price, images, tags, vendor | Shopify API (read_products scope) |
| Data generated in the app | simulations, campaign plans, parameters (sector, niche, country, budget, duration, objective), merchant targets (CPA/CPL/ROAS) | entered by the merchant / produced by the app |
| Advertising performance data | CSV reports exported from Meta Ads Manager, aggregated by ad set/interest (spend, impressions, CTR, ROAS…) | uploaded by the merchant |
| Subscription data | active plan, payment status | Shopify Billing (via webhook) |
Access tokens: stored only to let the app operate on behalf of the store; never shared with third parties except as needed for technical operation (hosting).
3. End-customer data
AdPilot does not collect or process personal data about the store's end customers (names, emails, orders, addresses). The performance CSVs uploaded contain aggregated metrics (per ad set/interest), not identifiable personal data. We nonetheless respond to Shopify's mandatory GDPR compliance webhooks (see §7).
4. Why we process data (purposes and legal basis)
- Providing the service (generating simulations, campaigns, analyses): performance of the contract with the merchant.
- Managing subscriptions and payments (via Shopify Billing): performance of the contract / administrative obligations.
- Security and abuse prevention (input validation, technical error logging): legitimate interest.
We do not use the data for our own advertising profiling, and we do not sell it.
5. Artificial Intelligence (Anthropic / Claude)
To generate campaign plans and analyses, the app sends prompts to an AI model provided by Anthropic (Claude), which acts as a processor/sub-processor.
- What we send: merchant product data (title, description, price, tags), campaign parameters and, for the optimizer, the aggregated CSV performance data.
- What we do NOT send: access tokens, end-customer personal data.
- Content sent is sanitized (control characters removed, delimiters neutralized) before transmission.
- AI outputs are estimates and suggestions, not guarantees of advertising performance.
Refer to Anthropic's terms for how the API processes data.
6. Third parties (sub-processors)
| Provider | Role | Location |
|---|---|---|
| Shopify | e-commerce platform, authentication, billing | per Shopify policies |
| Anthropic | AI model (generation/analysis) | per Anthropic policies |
| Railway | application and database hosting | European Union (Amsterdam, NL) |
The production database is hosted on Railway infrastructure in the European Union (Amsterdam, NL).
7. Data retention and deletion
- Deletion by the merchant: when the merchant deletes a simulation, campaign or report, the item disappears immediately from their view; it is retained internally for a maximum of 7 days (safety margin) and then permanently deleted.
- App uninstall (
app/uninstalled): sessions associated with the store are deleted. - Store redaction request (
shop/redact): upon receiving the Shopify webhook, we permanently delete the store's data from our database. - Customer data request / customer redaction (
customers/data_request,customers/redact): handled as required by Shopify; since we do not retain end-customer PII, we have no personal data to return or delete.
8. Your rights (GDPR)
You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. To exercise them, write to jasoncurro31399@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).
9. Security
We apply reasonable technical and organizational measures: encrypted connections (HTTPS), HMAC signature verification on Shopify webhooks, input validation and sanitization, per-store data isolation, and error handling that does not expose technical details to users. No system is 100% secure.
10. Minors
The app is intended for businesses (merchants) and is not directed at children under 16.
11. Changes to this policy
We may update this policy; we will publish the updated version at this address with a new "Last updated" date. Material changes will be communicated through appropriate channels.
12. Contact
For any questions about data processing: jasoncurro31399@gmail.com.