1. Introduction

This Privacy Policy describes how Quentara Labs ("we", "us", or "our") collects, uses, and protects information through our My Digital BFF platform (the "Service"), including our integrations with Shopify, Google Analytics, Google Ads, and Meta (Facebook).

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information from connected platforms

When you connect your accounts, we access aggregated analytics data from the following platforms:

Shopify: Revenue, sales, order, session, conversion, and customer retention metrics via the Analytics API; if granted, discount and promotion data and product catalog data (categories, tags, images, SEO fields, metafields) via the Admin API, and read-only storefront catalog data (products, variants, availability) via the Storefront API
Google Analytics: Traffic sources, user behavior, session data, and conversion metrics via the GA4 API
Google Ads: Advertising performance, spend, impressions, clicks, and conversion data via the Google Ads API
Meta (Facebook): Advertising performance including impressions, clicks, spend, conversions, and ROAS via the Meta Marketing API

We do not access or store any personally identifiable information (PII) about your customers, including names, email addresses, physical addresses, phone numbers, or payment details.

2.2 Information you provide directly

When you create an account, we collect your name and email address through our OAuth authentication providers (Google or Facebook).

2.3 Connected account information

We store identifiers for your connected accounts (such as store names, domains, and account IDs) to manage your integrations and display them in your dashboard.

2.4 Usage and interaction data

To operate and improve the Service, we collect data about how you use it -- page views, feature usage, interaction events, device and browser information, and error diagnostics. This includes session recordings that capture how you navigate the interface. Fields that display personal or financial data are masked and are not included in these recordings. We use PostHog to process this usage data on our behalf (see Section 8).

3. How We Use Your Information

We use the collected information to:

Provide strategic growth analysis and performance insights for your business
Calculate scores across Customer Acquisition, Conversion Optimization, and Customer Lifetime Value pillars
Generate AI-powered strategic recommendations
Display trends, goal tracking, and performance metrics
Maintain and improve the Service

To generate AI-powered insights and chat responses, we send the relevant business and analytics data (such as metrics, goals, and the brand context you provide) to our AI subprocessor, Anthropic, as described in Section 8. We do not sell or rent your data, and we do not share it with third parties for their own marketing purposes.

4. Data Storage and Security

Your data is stored on secure, encrypted databases hosted in the United States. We use industry-standard security measures including:

Encryption of sensitive data at rest and in transit (TLS)
OAuth token encryption via our authentication provider
Rate limiting and HMAC verification for all API endpoints
Role-based access controls

5. Data Retention

We retain your aggregated analytics data for as long as your account is active and your platform integrations are connected.

When you disconnect a platform integration, the associated connection record and OAuth tokens are deleted immediately
Upon app uninstallation or account deletion, all associated analytics data, sync history, and metric summaries are erased within 30 days

You may request deletion of your account and all associated data at any time by contacting us. All data will be removed within 30 days of the request.

6. International Data Transfers

Your data is processed and stored in the United States. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please be aware that your information may be transferred to and processed in a country that may not provide the same level of data protection as your home country.

By using the Service, you consent to this transfer. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Restriction: Request that we limit processing of your data
Portability: Request your data in a portable format

To exercise any of these rights, contact us at support@quentaralabs.com. We will respond within 30 days.

8. Third-Party Services

8.1 Data sources and integrations

The Service integrates with the following platforms:

Shopify:To access your store's aggregated analytics data and, if granted, discount and product catalog data
Google Analytics: To access website traffic and conversion data
Google Ads: To access advertising performance and spend data
Meta (Facebook): To access advertising performance data; also used for account authentication
Google: Also used for account authentication

8.2 Subprocessors

We rely on the following third-party subprocessors to operate the Service. Each processes data on our behalf under its own terms and privacy policy:

Anthropic (AI processing):To generate strategic insights, recommendations, and chat responses, we send your business and analytics data (such as metrics, goals, and the brand context you provide) to Anthropic's Claude API. Anthropic acts as a data processor and, under its commercial terms, does not use this data to train its models. We do not send your customers' personally identifiable information to Anthropic.
PostHog (product analytics, session recording, and error tracking): To understand how the Service is used and to diagnose problems, we use PostHog to process usage and interaction data -- including page views, feature usage, device information, error diagnostics, and session recordings of your navigation through the interface. Fields that display personal or financial data are masked and excluded from these recordings.
Vercel: For application hosting, delivery, and serverless compute.

Each of these services has its own privacy policy governing how it handles your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Quentara Labs
Email: support@quentaralabs.com