Privacy Policy

1. Introduction

EC Choice AI (“the service”) respects your privacy and works to protect personal information. This privacy policy explains what information the service collects, uses, and protects.

2. Information we collect

2.1. Account information

• Email address
• Password (stored in hashed form)
• Name
• Company name

2.2. Store connection information

• Connection details for Shopify, Amazon, Rakuten RMS, Yahoo! Shopping, and similar channels
• API credentials (stored encrypted)
• Store information

2.3. Data from marketplaces

• Orders: order ID, order date and time, order status, order amount, currency
• Order lines: SKU, ASIN, product name, quantity, line amount

We do not collect or store information that identifies a buyer (name, email address, shipping address, or telephone number) for any marketplace connection.We import only the order and product information needed for analysis. For Amazon, we have not applied for the restricted roles that would allow us to receive that information, so we cannot obtain it as a permission. For Shopify, Rakuten Ichiba, and Yahoo! Shopping, we remove buyer fields from the marketplace response before saving. We also do not store order-status URLs or the buyer’s IP address.

2.4. Data from advertising platforms

If you connect Google Ads, Amazon Ads, Meta ads, or a similar account, we collect only the following so we can subtract ad cost from sales.

• Ad account ID (such as a Google Ads customer ID) and display name
• Daily and campaign-level ad cost, campaign name, and landing URL
• Access tokens and refresh tokens used for the connection (stored encrypted)

We do not create, edit, or bid on ads. We do not collect personal information about people who saw or clicked an ad.

2.5. Information from a Google account

• Sign in with Google: email address, name, and profile image (openid / email / profile)
• Google Ads connection: the information in 2.4 (Google Ads API, read-only)

2.6. Technical information

• IP address
• Browser information
• Device information
• Access logs

2.7. Information from document requests and the diagnostic

If you request a document or use the diagnostic without creating an account, we keep the following. We use it to show the result and to email the document or a follow-up.

• Email address and company name (optional)
• Diagnostic answers and the result
• Which page or ad you came from (such as utm parameters on the URL)

2.8. Information from the Amazon Selling Partner API

We import and store the following from the Amazon Selling Partner API:

• Orders: order ID, order date and time, order status, order amount, and currency (Orders API and the order report by order date)
• Order lines: SKU, ASIN, product name, quantity, and line amount
• Product traffic: date, product identifier, sessions, and page views (the sales and traffic report. Amazon’s documentation requires the Brand Analytics role for this report)

We do not collect or store information that identifies a buyer (name, email address, shipping address, or telephone number). City and postal code on a shipping address, which can appear on the order report, are not fields we store. We do not store the raw payload of orders imported from Amazon.

The program contains functions for the Catalog API, the settlement report, and the Finances API. Nothing in the current program calls those functions or stores their results.

We have no feature that passes information obtained from Amazon to a third party for ad delivery, and no feature that sells it to other customers. Another customer cannot see your Amazon information from their own screens. The host (Render) stores the order and product information we keep. When you use an AI feature, what we send to OpenAI is period totals and product-level profit totals, not individual orders and not buyer information.

When you disconnect an Amazon connection, or when the connection is stopped because the authorization expired, we stop further collection. Orders, order lines, and product traffic that came from the Amazon API for that connection become eligible for deletion 30 days after the stop. The daily job deletes them only when deletion is turned on. When that setting is off, the job records how many rows match and leaves the data in place. The setting is off by default.

3. How we use information

We use collected information to:

• Provide and improve the service
• Sync data from commerce channels
• Produce sales analysis and reports
• Provide support
• Maintain security
• Meet legal requirements
• Send notices about the service

4. Sharing

We do not share your personal information with third parties except:

• When you have explicitly agreed
• When the law requires it
• When it is needed to provide the service (for example, payment processing or cloud hosting)
• In a merger, acquisition, or sale of assets

4.1. Google user data

Use of information received from Google APIs, and its transfer to other apps, follows the Google API Services User Data Policy, including the Limited Use requirements.

• We use information received from Google only to show you sales, ad cost, and profit totals, and to sign you in.
• We do not sell information received from Google, and we do not use it for advertising or credit decisions.
• People do not read the contents except when the law requires it, when security requires it, or when you agree.
• We do not use it to train general-purpose AI models.

You can disconnect the link at any time from the ad-connection screen in the service. Disconnecting deletes the token and stops further collection. You can also revoke access from your Google Account’s third-party accesspage. To ask us to delete ad cost we have already imported, email the address below.

5. Protection

We protect data with:

• SSL/TLS for data in transit
• Encrypted storage of credentials
• Access control and authentication

6. Retention

We keep data while your account is active.

7. Your rights

You may ask to:

• Access your personal information
• Correct your personal information
• Delete your personal information
• Restrict processing
• Receive your data in a portable form
• Object to processing

To use these rights, email support at info@ec-choice-ai.com.

8. Cookies and similar technologies

We use cookies and similar technologies to provide and improve the service. For analytics and to measure ads, we send page views to the providers of Google Analytics 4, Google ads, and the Meta Pixel. You can control cookies in your browser settings.

9. Third-party services

We use these third-party services:

• Stripe (payments)
• Render.com (cloud hosting)
• Shopify, Amazon, Rakuten RMS, and Yahoo! Shopping (store connections)
• Google (Sign in with Google and the Google Ads connection), Amazon Ads, and Meta ads (ad-cost connections)
• OpenAI (AI chat and the wording of the weekly summary. We send totals, not buyer information)
• Google Analytics 4, Google ads conversion measurement, and the Meta Pixel (analytics and ad measurement)

Each service’s privacy policy is on that service’s website.

10. Changes

We may update this privacy policy from time to time. If a change is important, we will tell you. The current policy is this page.

11. Contact

For privacy questions, email: