EcomProfit
Menu
Join waitlist

Legal

Privacy Policy

This Privacy Policy explains how EcomProfit collects, uses, stores, and discloses information when you use our Service.

Last updated: May 5, 2026

1. Who We Are

EcomProfit is operated by TheDevNomad ("we", "our", "us"). This policy applies to all users of EcomProfit web applications, pages, and support channels.

2. Information We Collect

Account and authentication data

  • Email address and account identifier through Supabase Auth.
  • Session/authentication cookies required to keep you signed in.

Integration data

  • Shopify connection data (shop domain, tokens, token expiry, granted scopes, and connection timestamps).
  • Shopify commerce data (products, orders, and order line item data) used by campaign reports and forecasts.
  • Meta connection metadata required for integration operation (for example, connection status, granted scopes, and token lifecycle details).
  • Meta ad account/campaign data and daily spend metrics used in reporting.

App campaign (not Meta) and account configuration data

  • Store and product references.
  • Campaign start date and linked Meta campaign IDs.
  • App campaign (not Meta) inputs such as COGS, margin %, ad budget/day, and override fields.

Usage and diagnostic data

  • Operational logs, error logs, and diagnostic information.
  • Performance and reliability telemetry from infrastructure.

3. How We Use Information

  • To authenticate users and secure access to the Service.
  • To sync and display Shopify and Meta integration data.
  • To generate in-app campaign (not Meta) reports, forecasts, and analytics.
  • To store and manage in-app campaign (not Meta) settings and linked integrations.
  • To monitor reliability and improve the Service.
  • To comply with legal and regulatory obligations.

We do not sell your personal data.

4. Legal Bases (where applicable)

Depending on your jurisdiction, we process data under one or more of the following legal bases: contract performance, legitimate interests (security, fraud prevention, and service operation), legal obligation, and consent where required.

5. Data Retention

We retain personal data for as long as needed to provide the Service, maintain security and integrity, and meet legal obligations.

  • Account and campaign data: retained while your account is active.
  • Integration tokens/connection records: retained until disconnected, replaced, or deleted.
  • Billing records: retained as required for accounting, tax, and legal compliance.
  • Logs/diagnostics: retained for limited periods based on operational and compliance needs.

6. Security

We use reasonable administrative, technical, and organizational safeguards including transport encryption (HTTPS), authenticated access controls, and restricted infrastructure access. No system can guarantee absolute security.

7. Service Providers and Disclosure

We share information with service providers required to run EcomProfit, including:

  • Supabase (authentication and data storage)
  • Shopify and Meta/Facebook (connected integrations)
  • Paddle (payment processing, checkout, taxation, invoicing, and subscription management)
  • Hosting and infrastructure providers

We may also disclose information to comply with law, protect rights and platform security, or support merger and asset transfer events.

8. International Transfers

Your data may be processed in countries outside your jurisdiction. We take reasonable steps to protect data involved in cross-border transfers.

9. Your Privacy Rights

  • Access personal data we hold about you.
  • Correct inaccurate or incomplete information.
  • Request deletion of your data or account.
  • Object to or restrict certain processing.
  • Request data portability where applicable.

You can also disconnect Shopify or Meta integrations in app settings.

10. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children.

11. Third-Party Services

The Service may contain links to third-party websites or services. Their privacy practices are governed by their own policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we update the "Last updated" date and may provide additional notice where required.

13. Contact

For privacy questions, data requests, or complaints, contact us at support@thedevnomad.com. Our operating jurisdiction is the Philippines.