How we handle your data.

Deliberate Studio, Inc. builds AI agents for ecommerce operations. When a merchant installs one of our apps (including Deliberate Audit) or engages us for an agent build, we access data in their tools — orders, products, inventory, advertising performance, marketing flows, support tickets — to do the work the merchant hired us to do. This page explains what we collect, where it lives, and what control you have over it.

We're a small team and we operate this way on purpose: agents run on your credentials inside the systems you already use. We don't sell data. We don't train models on your data. We don't benchmark across customers without explicit permission.

What we collect

Through Shopify OAuth, our apps may access the following data from your store, depending on which scopes you approve at install time:

• Orders and fulfillment — order history, line items, totals, shipping addresses, tracking events, return data
• Products and inventory — products, variants, inventory levels, cost-per-item, metafields
• Discount codes — active codes, usage counts, expiry rules
• Customer aggregates — per-customer order count, total spent, and first-order date, used to calculate lifetime value and repeat-purchase rates.
• Shop settings — shipping policy text, primary domain, locations, script tags installed by other apps
• Public storefront content — we fetch your homepage and public product catalog to fingerprint installed apps and, for the audit and content engine, to analyze your store and generate sample content. Same data any visitor to your site would see.

Through Meta (Facebook and Instagram), when you connect your Meta assets to your Deliberate workspace — by sharing them with Deliberate's business as a partner, by generating a system-user token, or by signing in with Facebook Login for Business — we may access:

• Advertising performance — spend, impressions, clicks, purchases and purchase value for the ad accounts you connect, at campaign, ad set and ad level, plus audience and placement breakdowns
• Campaign structure — campaign, ad set and ad names, statuses, budgets, cost caps and the creative attached to them
• Page and Instagram content — posts, media, stories, captions, comments and their public authors, and engagement and follower metrics for the Pages and Instagram professional accounts you connect
• Partnership-ad permissions — which creators have granted your account permission to run partnership ads, and which of their posts are eligible
• Custom Audiences — where you ask us to, we upload hashed identifiers of your own existing customers to your ad account so prospecting campaigns exclude people who already bought. The list stays in your ad account; we keep no copy beyond the hashed upload

We write to your Meta assets only within the limits you set — for example, pausing and resuming ads, changing budgets and cost caps, creating new ads, and uploading Custom Audiences. We never touch billing or payment methods. Access is granted by you in Meta Business settings and can be revoked there at any time; the steps are on our data deletion page.

When you add context in any of our dashboards (feedback boxes, comments, call notes), we store that text so agents can incorporate it into future analysis.

Why we collect it

Exclusively to provide the service you engaged us for — running audits, answering questions about your store, generating reports, building tools, or operating agents on your behalf. Specifically:

• Calculate lifetime value, repeat-purchase rates, and cohort analytics for your internal reporting
• Surface issues in your discount codes, inventory, fulfillment, or site experience
• Generate findings for you to review and decide how to act on
• Build dashboards and reports you can review, export, and take with you
• Report your advertising performance and, where you have asked us to run your paid media, carry out campaign changes within the limits you set

We do not use your data to train AI models, build lookalike datasets, or benchmark across customers without explicit permission.

How we store it

• API credentials — stored in a managed secrets service on Google Cloud, encrypted at rest.
• Audit results, agent output and generated artifacts (audit reports, dashboards) — stored on Google Cloud, encrypted at rest. You can request a copy or deletion as described below. If an engagement involves us writing code into your own repositories, that code lives in the repositories you specify and is yours to keep.

Data is encrypted in transit (TLS) and at rest.

Who has access

• People at Deliberate Studio, Inc. working on your engagement.
• Subprocessors we depend on — listed below. Each has their own privacy policy and data handling commitments.
• You — you can request a copy or deletion of the data we hold on your behalf.

We do not sell data. We do not share the data you entrust to us — your store's data, your dashboards, anything our agents touch on your behalf — with advertisers, data brokers, or any third party outside the subprocessors below. Our public marketing site separately carries an advertising pixel that reports visits to that site; it has no access to your data, and it is described under Cookies and tracking.

Subprocessors

We rely on a small set of vendors to operate the service. We don't sell data, and we don't share the data you entrust to us with advertisers or data brokers. Meta appears twice below: as a platform you may connect, whose data we read and act on for you, and as the pixel on our public marketing site. The categories of providers we use:

Where you have a data processing agreement with us, its terms on sub-processors apply.

Retention

We keep audit results and agent output while you're engaged with us and for a limited period afterward, then delete them.

If you uninstall one of our Shopify apps, Shopify notifies us and we delete your stored tokens and data as described under Shopify-required data webhooks below. If you disconnect Meta — by removing Deliberate as a partner, revoking the token, or removing the app in Business settings — our access ends. You can ask us to delete your data at any time; the steps are on our data deletion page.

Shopify-required data webhooks

Shopify requires apps to respond to three privacy webhooks. Here's how we handle each:

• customers/data_request — When a merchant relays a customer data request to us, we provide whatever per-customer data we hold within 30 days. For Deliberate Audit specifically, this response is typically empty: we retain customer-level aggregates only (order count, total spent, first-order date), never names, emails, or phone numbers.
• customers/redact — When a merchant relays a customer deletion request, we delete any data tied to that specific customer within 30 days. Same caveat: for Deliberate Audit, we typically have nothing customer-specific to delete.
• shop/redact — Shopify sends this 48 hours after a shop closes. We delete all data associated with that shop within 30 days of receipt.

Cookies and tracking

Our app dashboards (including the Deliberate Audit dashboard) use a session cookie to keep you signed in across requests. We do not use third-party tracking or advertising cookies on those dashboards.

Our marketing site, deliberatestudio.com, uses two third-party analytics tools to understand traffic and improve the site:

• Google Analytics 4 — aggregate traffic and usage measurement (pages viewed, referral sources, basic interactions).
• Microsoft Clarity — session replay and heatmaps that show how visitors navigate the page so we can improve it; we also export a daily aggregate snapshot for our own analysis.

It also carries one advertising tool:

• Meta Pixel — tells Meta that a browser visited a page on our marketing site, so we can measure advertising and reach people who have looked at what we do. It records page visits, never what you type into a form here.

These run on the marketing site only — never on the app dashboards — and collect only visitor browsing data, never Shopify merchant or customer data. Pages reached by a private link we sent you — your order page, a license page, your creator page — carry none of these tools at all.

Consent. If you visit from the EEA, the UK, or California, we default analytics and advertising storage to denied (Google Consent Mode), withhold Microsoft Clarity entirely, and show a banner letting you accept or decline — nothing non-essential loads until you choose. The Meta Pixel is treated the same way: in those regions it stays off until you accept. Outside those regions the analytics tools and the pixel load by default; you can opt out at any time using your browser's cookie controls.

Your rights

You can:

• Access — ask for a copy of the data we hold on your behalf
• Delete — ask us to delete it
• Revoke — uninstall the app, or disconnect a platform such as Meta or Google in its own settings, to end our access

Step-by-step revocation and deletion instructions for every platform we connect to: deliberatestudio.com/data-deletion.

If a data protection law that applies to you and to us gives you further rights, contact us and we'll respond as that law requires. We don't sell your data.

AI processing & content generation

Some features — the Deliberate Audit, the content engine, and agents such as Zelda — send data to AI models to produce their output. For the audit and the content engine this includes the store URL you enter and your public storefront data (product titles, descriptions, and existing site copy — the same content any visitor can see); for agent work it includes the store data described above plus any context you add. We send only what's needed to produce the result you asked for.

This processing runs through third-party AI model providers (see the Subprocessors section above). Your data is not used to train AI models — neither ours nor theirs — and generated content belongs to you.

Automated decisions

Our agents propose changes — to code, copy, flows, dashboards — for your team to review. Some actions run automatically within settings you turn on — for example, paid-media guardrails that pause an ad set whose cost per purchase exceeds a cap you set.

Governing law

This policy, and any disputes arising from it, are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-law principles.

Contact

Privacy questions, data requests, or incident reports: hi@deliberatestudio.com.

Deliberate Studio, Inc. is a Delaware corporation. Physical correspondence: c/o our registered agent of record, available on request at hi@deliberatestudio.com.