Privacy Policy
Last updated: March 25, 2026
Who we are
Promonaut ("we", "us", "our") is a Shopify application that measures promotional incrementality. This policy explains how we collect, use, and protect your data when you use our app.
Data we collect
When you install Promonaut, we access the following data from your Shopify store via the Shopify API:
- Order data — order totals, dates, and customer identifiers (hashed for privacy)
- Discount usage — which discount codes were applied to which orders
- Refund data — refund amounts and dates, used to adjust metrics for returns
- Store information — store name, domain, and currency for display purposes
We do not collect personal customer information such as names, email addresses, or payment details. Customer identifiers are hashed using SHA-256 before storage.
How we use your data
- Incrementality measurement — comparing test and control group purchase behavior to determine promotional effectiveness
- Historical analysis — generating your Promo Health Report from past order and discount data
- Product improvement — anonymized, aggregated benchmarks to improve our statistical models
We never sell your data. We never use your data for advertising. Your store's data is only used to provide Promonaut's services to you.
Data retention
We retain your data for as long as you have Promonaut installed. When you uninstall the app, we delete all store-specific data within 30 days. Anonymized, aggregated data used for benchmarks may be retained indefinitely.
Third-party services
We use third-party services for hosting, database storage, anonymized product analytics, and error monitoring. These services are selected for their compliance with data protection standards. Data is processed in the United States.
GDPR and data deletion
If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data. Promonaut responds to Shopify's mandatory GDPR webhooks for customer data requests and shop data erasure.
To request data deletion or access, contact us at privacy@promonaut.ai.
Cookies
Promonaut does not set cookies on your customers' browsers. Smart Link assignment uses server-side consistent hashing — no client-side tracking is involved.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes via the app or email. The "last updated" date at the top reflects the most recent revision.
Contact
Questions about this policy? Contact us at privacy@promonaut.ai.