Privacy Policy
This policy explains what data RoasRadar collects when a merchant installs our Shopify app, how we use it, who we share it with, and how to have it deleted. RoasRadar is operated by KAIRO GLOBAL TRADING LIMITED ("RoasRadar", "we", "us").
The short version
- We use your store and ad data only to show your ROAS and recommend changes in your own RoasRadar account.
- We never sell data, and we never use it to advertise to your customers.
- RoasRadar reads your ad accounts. It does not change your ads; you make every change yourself.
- Uninstall the app and we delete your store’s data, as described in "Retention and deletion".
Who this applies to
This policy covers merchants who install RoasRadar ("you"), the staff who use it in your Shopify admin, and the shoppers whose orders are processed through it. For shoppers, you are the controller of their personal data and we process it on your behalf, as a processor, only to provide the app to you.
Data we collect
When you install RoasRadar and connect your accounts, we collect the following through Shopify’s APIs and the APIs of the ad platforms you choose to connect.
| Source | What we collect | Why |
|---|---|---|
| Shopify store | Store name, domain, currency, time zone, plan, and the email of the staff member who installed the app | To set up your account and contact you about it |
| Shopify orders | Order ID, time, totals, discounts, refunds, landing page, referring site, UTM parameters and ad click IDs (such as fbclid and gclid) | To match each order to the ad that brought it in and calculate ROAS |
| Shopify customers | A customer ID linked to the order, used to tell new from returning customers. We do not need or store names, addresses or payment details for attribution | To report new vs returning customer performance |
| Meta Ads | Ad account, campaign, ad set and ad names and IDs, spend, impressions, clicks, and creative previews | To show spend, performance and creative next to your orders |
| Google Ads (and Google Tag Manager, if connected) | Account, campaign, ad group and ad names and IDs, spend, impressions, clicks and conversions | Same as above |
| Settings you enter | Gross margin, ROAS targets and alert preferences | To draw your break-even line and send alerts |
| App usage | Pages viewed in the app, actions taken, error logs, and device and browser type | To keep the service working and improve it |
We receive access to your ad accounts through the platform’s own sign-in (OAuth). We store the access tokens encrypted and never see your Meta or Google passwords.
How we use data
- To provide RoasRadar: attribute orders to ads, calculate ROAS against your break-even line, rank recommended moves and send the alerts you turn on.
- To support you when you contact us, and to send service messages such as billing or security notices.
- To keep the service secure, prevent abuse and fix errors.
- To improve the product using aggregated, de-identified usage statistics that cannot identify you, your store or your customers.
We do not sell personal data. We do not use your data, or your customers’ data, to build advertising profiles, to target ads, or to train models for anyone else. Data from one store is never shown to another store.
Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we process merchant data to perform our contract with you, for our legitimate interests in running and securing the service, and to meet legal obligations. Shopper data is processed on your instructions as your processor.
Sharing and service providers
We share data only with the providers that help us run RoasRadar, under contracts that limit their use of it to providing their service to us:
- Shopify, to run the app inside your admin and handle billing.
- Meta and Google, when you connect those accounts, to read your ad data.
- Cloud hosting and infrastructure providers (including Cloudflare) to host the app and website, store data and send email.
We may also disclose data if required by law, to protect our rights or users’ safety, or as part of a merger or acquisition, in which case this policy will continue to apply.
International transfers
We and our providers may process data in countries other than your own, including Hong Kong and the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Retention and deletion
- While installed: we keep order and ad data for as long as you use RoasRadar so you can compare performance over time.
- After you uninstall: we stop collecting data immediately and revoke our access to your ad accounts. When Shopify sends its store deletion request (48 hours after uninstall), we delete your store’s data within 30 days.
- Shopper requests: when Shopify forwards a customer data request or a customer deletion request, we provide or delete that customer’s data within 30 days.
- Backups and logs are overwritten on a rolling basis and kept no longer than 30 days after deletion.
Security
Data is encrypted in transit (HTTPS) and at rest. Ad platform tokens are stored encrypted. Access to production data is limited to staff who need it to run and support the service. No system is perfectly secure, but if we learn of a breach affecting your data we will notify you and the relevant authorities as the law requires.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. Merchants can exercise these rights by emailing us. Shoppers should contact the store they bought from; the store can send the request to us through Shopify, and we will act on it.
Cookies on this website
roasradar.io does not use advertising or analytics cookies. It loads fonts from Google Fonts, which receives your IP address to deliver them. The RoasRadar app runs inside Shopify admin and uses only what Shopify needs to sign you in.
Children
RoasRadar is a business tool for merchants and is not directed to children. We do not knowingly collect data from anyone under 16.
Changes to this policy
If we make a material change, we will update the date at the top of this page and tell merchants inside the app or by email before it takes effect.
Contact us
Questions or requests about privacy:
Email:
support@roasradar.io