Privacy policy

bizinsights (“we”, “us”, “our”) is the controller of the personal data described in this policy. You can contact us at sales@ikorex.com.au.

When you connect a store, we ask Shopify for two permissions, read_orders and read_products. With them we read the following through Shopify's Admin API:

• Orders — order number, time, currency, status, sales channel, fulfilment status and time, discount codes, and the money totals (subtotal, discounts, tax, shipping and total).
• Order line items — product and variant reference, SKU, quantity and price.
• Refunds — amount and the date the refund was created.
• Products — title, status, vendor, type, and per-variant price, stock level and unit cost.
• Store settings — shop name, currency and time zone, so that figures are shown in your terms.

Your customers' personal data

The analytics we store contain none of your customers' personal data: no names, email addresses, postal addresses or phone numbers are saved for the dashboard. The one feature that shows them, Customers to follow up, reads them from Shopify while you look. WhatsApp messaging, if you turn it on, is the only exception. Both are described in section 3. Where the dashboard distinguishes new from returning buyers, it uses a one-way keyed hash of the Shopify customer ID, scoped to a single store, from which no identity can be recovered.

The following features collect further information only if you turn them on.

Shopping funnel

The funnel needs two further permissions, write_pixels and read_customer_events, and adds a Shopify web pixel to your storefront. The pixel runs only for shoppers who accept analytics tracking, and sends five events: page viewed, product viewed, added to cart, checkout started and checkout completed. Each event carries its time, the page address and Shopify's anonymous browser ID.

We keep the page address without its query string, and never keep checkout, order-status or account addresses, because those carry a shopper's token. The browser ID is stored only as a one-way hash. From these events we record each visit's landing page, last page, how far it progressed and which parts of the store it viewed. No names, email addresses or IP addresses are stored.

Customers to follow up (only if you allow access to your customers)

To help you get back in touch, the dashboard shows the name, email address and phone number of shoppers who left a checkout unfinished, signed up for your newsletter or recently became customers, together with whether they agreed to receive marketing emails. bizinsights reads this information from Shopify each time you open that card, and shows it only to workspace members with the Owner, Admin or Analyst role. It is not saved in our database; we record only that the card was viewed, and by whom, in your workspace's audit log.

WhatsApp messaging

To send the order updates, delivery updates, cart reminders, review requests and campaigns you switch on, bizinsights keeps each customer's WhatsApp number and first name, encrypted with AES-256-GCM, together with a one-way keyed hash of the number used to recognise replies. The dashboard shows numbers masked. We keep a record of what each customer agreed to and of every opt-out, so that nobody who replied STOP is messaged again. Delivery addresses are used only to write the order confirmation and are deleted once it is sent. Messages are sent through Meta's WhatsApp Business Platform.

Message history is kept for 180 days, unfinished-checkout links and names for 30 days, and order timelines for one year. Customer reviews are kept until you delete your store from bizinsights. When Shopify asks us to erase a customer or your store, all of it is deleted.

Advertising accounts

With your permission, given on Meta's or Google's own consent screen, bizinsights reads your advertising reports: Meta Ads with ads_read, Google Ads with Google's adwords permission (Google offers no read-only Google Ads permission; bizinsights uses it only to read), and Google AdSense with adsense.readonly. We read:

• account names, IDs, currency and time zone;
• campaign, ad group, ad set and ad names, status, type and budget;
• spend, impressions, reach and clicks, and the conversions and purchases the platform attributes to its ads, per day, by device and by country;
• for AdSense, your site's estimated earnings, page views and clicks.

We keep these figures so the dashboard can compare periods. With each connection we also keep the platform's ID for the person who signed in (Google's account ID, Meta's app-scoped user ID) and the permissions they granted, so that disconnecting returns access only when no other account you connected relies on it.

When you disconnect an account, bizinsights deletes its figures and access token immediately and then returns the access to Google or Meta (Google Ads and AdSense share one Google sign-in, so Google's access is returned with the last of them). If you instead remove bizinsights' access in your Google or Meta account, bizinsights stops reading immediately, marks the account “Needs reconnecting” and keeps the figures already fetched until you disconnect it or ask us to delete them (see Delete your data). bizinsights never creates, changes or pauses an ad, never changes a budget or billing setting, and never spends money.

Email sending

To send the emails your automations and tests request, bizinsights connects to the mailbox you choose:

• Gmail or Google Workspace — permission only to send email as you (gmail.send) and your email address;
• Outlook or Microsoft 365 — only Mail.Send and your basic profile;
• Any other provider — the SMTP server, user name and password you enter.

bizinsights never reads, searches or deletes the mail in your mailbox. Tokens and passwords are encrypted with AES-256-GCM, never shown again, and deleted when you disconnect the account (Google's access is also revoked at that point).

For each email we keep the recipient (encrypted, with a one-way keyed hash and a masked form for the activity log), the subject, the sender and the provider's response — never the body, which is filled in from your template when the email is sent. The details of the order or event an automation refers to are kept encrypted for up to 35 days, so that a delayed email can still be written; the activity log is kept for 180 days. Addresses that unsubscribe or bounce are kept as a keyed hash so they are not emailed again. When Shopify asks us to erase a customer or your store, their email events and messages are deleted.

bizinsights' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to show you your own reports and to send the emails you set up. It is not sold, not used for advertising, and not read by people, except with your permission, for security purposes, or where the law requires it.

We store your email address and whether it has been verified, your workspace and role, your notification preferences, and an audit log of actions taken in your workspace. Sign-in is handled by Amazon Cognito, which keeps your password only as a salted hash. We never store your password, and we never see your Shopify or Google password.

The access token Shopify issues for your store is encrypted with AES-256-GCM before it is stored, and each ciphertext is cryptographically bound to the store it belongs to. Tokens are never returned by our API, never shown in the dashboard, and destroyed when you uninstall the app.

The tokens Meta and Google issue when you connect WhatsApp or an advertising account are protected in the same way and destroyed when you disconnect it. Email account tokens and SMTP passwords are also encrypted, each with its own key, and destroyed when you disconnect the account.

We process this information to provide the dashboard and the features you ask for — that is, to perform our contract with you. We do not sell your data, we do not share it with advertisers, and we do not use it to train machine-learning models.

We share information only with the service providers needed to run bizinsights:

Amazon Web Services

Hosting, storage and background jobs; accounts, sign-in and sign-in emails through Amazon Cognito.

Cloudflare

Our previous hosting provider. It keeps serving our old address, and the data of stores connected there, until everything has moved to Amazon Web Services.

Google Firebase

Our previous sign-in service. If your account was created before we moved to Amazon Cognito, your first sign-in afterwards is checked against it once, so you can keep your password.

Shopify

The source of your store data.

Meta (WhatsApp Business Platform)

Delivers WhatsApp messages, only for stores that connect WhatsApp.

Meta (Marketing API) and Google (Google Ads API, AdSense)

The source of advertising reports, only for stores that connect an advertising account.

Google (Gmail API), Microsoft (Microsoft Graph) or your own SMTP provider

Send the emails you set up, from the account you connect, only for workspaces that connect one.

Other members of your workspace see your store's figures according to the role you give them.

We keep store data for as long as the app is installed. Uninstalling the app from Shopify immediately destroys the stored access tokens, and we act on Shopify's mandatory customer data request, customer redact and shop redact webhooks. Disconnecting a store in Settings → Stores deletes its orders and metrics from bizinsights.

To have your entire workspace and account deleted, email sales@ikorex.com.au. How to remove the data that came from Meta and Google is explained on Delete your data.

You may ask us for a copy of your data, to correct it or to delete it, and you may object to its processing or ask us to restrict it. Email sales@ikorex.com.au and we will respond within 30 days.

If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner or, if you are in the UK or the EEA, to your local data protection authority.

If you bought from a store that uses bizinsights, we process your information on behalf of that merchant. To access or delete it, please contact the merchant: when they ask Shopify to erase your data, Shopify instructs us to erase it too.

This policy is governed by the laws of Victoria, Australia.

If we make a material change to this policy, we will notify workspace owners by email before the change takes effect. The date at the top of this page shows when it was last updated.