This is a product note for Cohort 1, not a legal privacy policy. Get a proper Australian Privacy Act review before anyone’s live store is connected.
We ask for your name, email, and password, plus the store story you type: driving forces, competitive edge, protectable IP, and a Brag Book. Passwords are hashed. Connection tokens are encrypted with SESSION_SECRET, which lives in the host’s environment, not in the database and not on disk.
Shopify reads are aimed at orders, revenue, and product counts. The MVP scopes do not ask for customer names, emails, or phone numbers. Omnisend and Klaviyo are asked for list and flow signals. If a field isn’t returned, the scorecard says so. It does not fill the gap.
Each login is its own silo in the local database. Nothing here trains a model on your numbers. You can remove a connection, and you can delete the login, which deletes the metrics stored for it.
Demo data is a fictional store called Linden Atelier. It is labelled on every screen that uses it.