Privacy Policy

Last updated: 31 July 2026

Clinchos("we", "us") is an operations dashboard for e-commerce stores. This policy explains what data we handle when you use Clinchos, and how we protect it.

Data we collect

• Account data — your name, email address and workspace settings when you create an account.
• Store data you connect — when you connect services to your workspace, we access only the data needed to power your dashboard: order and product data (Shopify), advertising performance (Google Ads / Google Merchant Center), customer support emails (Gmail), and bank transactions (your connected banking provider). You choose what to connect; each connection can be revoked at any time.
• Usage data — basic technical logs (errors, request timing) needed to keep the service reliable.

How we use it

• To display your own store's metrics, support inbox and reports back to you.
• To generate AI-drafted support replies from your customer emails — drafts are only ever sent after a human on your team approves them.
• To operate, secure and improve the service.

We do not sell your data, use it for advertising, or share it with third parties except the infrastructure providers below.

Google user data

Where you connect Google services (such as Gmail or Google Ads), our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features described above, is never sold, and is never used to train generalized AI models.

Advertising platform data

Where you connect an advertising account, we request read-only reporting access and nothing more. We never create, edit, pause or delete campaigns, ad sets, ad groups, ads, audiences or budgets on any platform, and we place no ads.

• Google Ads — daily cost, clicks and conversions per campaign and ad group, and shopping performance per product.
• Meta (Facebook and Instagram) — daily spend, impressions and clicks per campaign and ad set, via the ads_read permission. We do not read, store or create audiences.
• TikTok — daily spend, impressions and clicks per campaign and ad group.
• Pinterest — daily spend, impressions and clicks per campaign and ad group.

This data is used for one purpose: to set your advertising spend against your own Shopify orders and product costs, so you can see profit per channel. It is held in your own isolated workspace, is never combined with or shown to another customer, is never sold or shared with other advertising platforms, and is never used to train AI models. Each connection can be revoked at any time from Settings → Integrations, or from the platform's own account settings; revoking stops all further access immediately.

For a platform-by-platform breakdown of exactly which fields we read from each advertising API and what we do with them, see our API usage page.

Bank and financial account data

Where you connect a bank account — directly, through an open banking provider, or by uploading a statement — we request read-only access to transactions and balances. We cannot move money, make payments, or change anything about your account, and we never ask for or store your online banking password.

• What we read. Transaction dates, descriptions and amounts, and the account balance where the provider supplies it.
• What we do with it. We sort transactions into categories — software, team, advertising, supplier payments — so your profit and loss reflects what you actually spent, on the day you spent it, instead of an estimate.
• What we never do. We do not sell this data, share it with other customers, use it for advertising, use it to train AI models, or use it for credit scoring or any decision about you.
• Ending it.Disconnect at any time from Settings → Integrations, or from your bank's own app. Access stops immediately, and stored transactions are removed with your workspace as described below.

Where a connection is made through a licensed open banking provider, that provider holds the regulatory permission and you authorise the connection with your own bank. European rules require you to re-approve that connection periodically; we will tell you before it lapses. Uploading a statement yourself involves no connection to your bank at all.

Where data lives

Data is stored with our infrastructure providers: Supabase (database), Vercel (application hosting) and Anthropic (AI draft generation — support email content is processed to produce drafts). Each store's workspace is isolated: your data is visible only to your own team.

Retention & deletion

Your data is retained while your workspace is active. Disconnecting an integration stops new data flowing; deleting your workspace (or emailing us) removes your stored data within 30 days. Advertising data is kept only as daily and per-campaign totals for reporting; we do not retain platform data beyond what those reports need, and it is deleted with your workspace on the same 30-day basis. Uninstalling our Shopify app triggers deletion of that store's data in line with Shopify's requirements.

Your rights

You can request a copy, correction or deletion of your data at any time by emailing info@clinchos.io.

Contact

Questions about this policy: info@clinchos.io.