1. Introduction

This Privacy Policy describes how Quentara Labs ("we", "us", or "our") collects, uses, and protects information through our My Digital BFF platform (the "Service"), including our integrations with Shopify, Google Analytics, Google Ads, and Meta (Facebook).

My Digital BFF is operated by Quentara Labs LLC, which is under common ownership with El Toro Interactive, the verified Meta business that owns our Meta app.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information from connected platforms

When you connect your accounts, we access aggregated analytics data from the following platforms:

Shopify: Revenue, sales, order, session, conversion, and customer retention metrics via the Analytics API (ShopifyQL), reported to us as aggregates by day, channel, and product rather than as individual customer records; if granted, discount and promotion data and product catalog data (categories, tags, images, SEO fields, metafields) via the Admin API, and read-only storefront catalog data (products, variants, availability) via the Storefront API
Google Analytics: Traffic sources, user behavior, session data, and conversion metrics via the GA4 API
Google Ads: Advertising performance, spend, impressions, clicks, and conversion data via the Google Ads API
Meta (Facebook): Advertising performance including impressions, clicks, spend, conversions, and ROAS via the Meta Marketing API

We do not access or store any personally identifiable information (PII) about your customers, including names, email addresses, physical addresses, phone numbers, or payment details.

2.2 Information you provide directly

When you create an account, we collect your name and email address through our OAuth authentication providers (Google or Facebook).

2.3 Connected account information

We store identifiers for your connected accounts (such as store names, domains, and account IDs) to manage your integrations and display them in your dashboard.

2.4 Usage and interaction data

To operate and improve the Service, we collect data about how you use it -- page views, feature usage, interaction events, device and browser information, and error diagnostics. This includes session recordings that capture how you navigate the interface. Fields that display personal or financial data are masked and are not included in these recordings. We use PostHog to process this usage data on our behalf (see Section 8).

3. How We Use Your Information

We use the collected information to:

Provide strategic growth analysis and performance insights for your business
Calculate scores across Customer Acquisition, Conversion Optimization, and Customer Lifetime Value pillars
Generate AI-powered strategic recommendations
Display trends, goal tracking, and performance metrics
Maintain and improve the Service

To generate AI-powered insights and chat responses, we send the relevant business and analytics data (such as metrics, goals, and the brand context you provide) to our AI subprocessor, Anthropic, as described in Section 8. We do not sell or rent your data, and we do not share it with third parties for their own marketing purposes.

4. Data Storage and Security

Your data is stored on secure, encrypted databases hosted in the United States. We use industry-standard security measures including:

Encryption of sensitive data at rest and in transit (TLS)
OAuth token encryption via our authentication provider
Rate limiting and HMAC verification for all API endpoints
Role-based access controls

5. Data Retention

We retain your aggregated analytics data for as long as your account is active and your platform integrations are connected.

When you disconnect a platform integration, the associated connection record and OAuth tokens are deleted immediately, and we revoke the token with the platform where the platform supports it (Google)
When you uninstall My Digital BFF from your Shopify admin, the store's connection is marked disconnected immediately and, once Shopify sends us its shop/redact notice (48 hours after uninstall), all analytics data, sync history, and metric summaries for that store are erased -- within 30 days at most
Upon account deletion, all associated analytics data, sync history, and metric summaries are erased within 30 days
Data sent to our AI subprocessor to generate an insight or chat response is retained by that subprocessor for up to 30 days for abuse and safety monitoring, then deleted (see Section 8.4)

You can delete your account and all associated data yourself at any time from Account settings (Account, Danger Zone, Delete Account). You can also disconnect a single platform, including Meta, from the Integrations page, which deletes that connection and its tokens immediately. If you prefer, email the contact in Section 10 and we will delete your data within 30 days of the request. Deleting your Facebook account's connection to the Service through Facebook's Apps and Websites settings has the same effect as disconnecting Meta here.

6. International Data Transfers

Your data is processed and stored in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please be aware that your information may be transferred to and processed in a country that may not provide the same level of data protection as your home country.

By using the Service, you consent to this transfer. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Restriction: Request that we limit processing of your data
Portability: Request your data in a portable format

To exercise any of these rights, contact us at support@quentaralabs.com. We will respond within 30 days.

8. Third-Party Services

8.1 Data sources and integrations

The Service integrates with the following platforms:

Shopify: To access your store's aggregated analytics data and, if granted, discount and product catalog data
Google Analytics: To access website traffic and conversion data
Google Ads: To access advertising performance and spend data
Meta (Facebook): To access advertising performance data; also used for account authentication
Google: Also used for account authentication

8.2 Google user data and Limited Use

When you connect Google Analytics or Google Ads, we request read-only access (the analytics.readonly and adwords scopes, used only for reporting queries) plus your basic profile (name and email address) to label the connection. We use this data only to: retrieve traffic, conversion, and advertising performance metrics for the accounts and properties you select; display them in your dashboards and reports; and generate strategic recommendations and chat responses for your organization. We store the metrics we retrieve and your encrypted OAuth tokens; we do not store raw Google Analytics event data or individual user records.

My Digital BFF's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not sell Google user data, do not use it for advertising or credit decisions, do not allow humans to read it except with your consent, for security or legal reasons, or in aggregated form, and do not use it to develop, improve, or train generalized artificial intelligence or machine learning models. Google user data is transferred only to the subprocessors listed in Section 8.4, solely to provide the user-facing features you use, and never for their own purposes. You can revoke our access at any time from your Google Account permissions page or by disconnecting the integration in the Service.

8.3 Shopify merchant and customer data

When you install My Digital BFF on your Shopify store, we request read access to your store's reports and analytics (read_reports), product catalog (read_products), and discounts (read_discounts), plus read-only Storefront browsing scopes, and write access to discounts (write_discounts) so that discount codes the assistant proposes can be created -- only after you explicitly approve each one. Analytics queries may touch customer data as defined by Shopify's protected customer data program (for example, returning-customer and customer lifetime value metrics); we process that data only in aggregate, only to provide the analytics and recommendations you see in the Service, and only for your organization. We do not use Shopify merchant or customer data to train AI or machine learning models, and we do not sell or share it with third parties for their own purposes. Shopify merchants may exercise their customers' data-subject rights through Shopify; we honor Shopify's customers/data_request, customers/redact, and shop/redact requests within 30 days. Quentara Labs is established in the United States; see Section 6 for international transfers.

8.4 Subprocessors

We rely on the following third-party subprocessors to operate the Service. Each processes data on our behalf under its own terms and privacy policy:

Anthropic (AI processing): To generate strategic insights, recommendations, and chat responses, we send your business and analytics data (such as metrics, goals, and the brand context you provide, and metrics retrieved from Shopify, Google Analytics, Google Ads, and Meta) to Anthropic's Claude API. Anthropic acts as a data processor and, under its commercial terms, does not use this data to train its models; it retains API inputs and outputs for up to 30 days for abuse and safety monitoring and then deletes them. We do not send your customers' personally identifiable information to Anthropic.
PostHog (product analytics, session recording, and error tracking): To understand how the Service is used and to diagnose problems, we use PostHog to process usage and interaction data -- including page views, feature usage, device information, error diagnostics, and session recordings of your navigation through the interface. Fields that display personal or financial data are masked and excluded from these recordings.
Vercel: For application hosting, delivery, and serverless compute.

Each of these services has its own privacy policy governing how it handles your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Quentara Labs
Email: support@quentaralabs.com