My Digital BFF

1. Introduction

This Privacy Policy describes how Quentara Labs ("we", "us", or "our") collects, uses, and protects information through our My Digital BFF platform (the "Service"), including our integrations with Shopify, Google Analytics, Google Ads, and Meta (Facebook).

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information from connected platforms

When you connect your accounts, we access aggregated analytics data from the following platforms:

Shopify: Revenue, sales, order, session, conversion, and customer retention metrics via the Analytics API
Google Analytics: Traffic sources, user behavior, session data, and conversion metrics via the GA4 API
Google Ads: Advertising performance, spend, impressions, clicks, and conversion data via the Google Ads API
Meta (Facebook): Advertising performance including impressions, clicks, spend, conversions, and ROAS via the Meta Marketing API

We do not access or store any personally identifiable information (PII) about your customers, including names, email addresses, physical addresses, phone numbers, or payment details.

2.2 Information you provide directly

When you create an account, we collect your name and email address through our OAuth authentication providers (Google or Facebook).

2.3 Connected account information

We store identifiers for your connected accounts (such as store names, domains, and account IDs) to manage your integrations and display them in your dashboard.

3. How We Use Your Information

We use the collected information to:

Provide strategic growth analysis and performance insights for your business
Calculate scores across Customer Acquisition, Conversion Optimization, and Customer Lifetime Value pillars
Generate AI-powered strategic recommendations
Display trends, benchmarks, and performance metrics
Maintain and improve the Service

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored on secure, encrypted databases hosted in the United States. We use industry-standard security measures including:

Encryption of sensitive data at rest and in transit (TLS)
OAuth token encryption via our authentication provider
Rate limiting and HMAC verification for all API endpoints
Role-based access controls

5. Data Retention

We retain your aggregated analytics data for as long as your account is active and your platform integrations are connected.

When you disconnect a platform integration, the associated connection record and OAuth tokens are deleted immediately
Upon app uninstallation or account deletion, all associated analytics data, sync history, and metric summaries are erased within 30 days

You may request deletion of your account and all associated data at any time by contacting us. All data will be removed within 30 days of the request.

6. International Data Transfers

Your data is processed and stored in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please be aware that your information may be transferred to and processed in a country that may not provide the same level of data protection as your home country.

By using the Service, you consent to this transfer. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Restriction: Request that we limit processing of your data
Portability: Request your data in a portable format

To exercise any of these rights, contact us at support@quentaralabs.com. We will respond within 30 days.

8. Third-Party Services

The Service integrates with:

Shopify: To access your store's aggregated analytics data
Google Analytics: To access website traffic and conversion data
Google Ads: To access advertising performance and spend data
Meta (Facebook): To access advertising performance data; also used for account authentication
Google: Also used for account authentication
Vercel: For application hosting and delivery

Each of these services has its own privacy policy governing how they handle your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Quentara Labs
Email: support@quentaralabs.com