Privacy Policy

At ROASCraft, we respect your privacy and are committed to protecting the personal and business data you share with us through the ROASCraft app.

1. Information We Collect

When you install and use our app, we may collect the following categories of data:

1.1 Store & Account Information (Non-Sensitive)

• Store name, email address, domain

• Ad account IDs, catalog IDs, and associated configuration metadata

1.2 Advertising & Analytics Data (Potentially Sensitive Under Google Policies)

• Campaign performance data, pixel/CAPI diagnostics

• Product catalog insights, optimization events, and reporting metrics

1.3 Technical & Usage Data

• Log files, device/browser information

• App interaction data for diagnostics and support

• Error reports and performance analytics

1.4 What We Do Not Collect

• No customer personally identifiable information (PII)

• No payment card details or financial data

• No authentication credentials, passwords, or OAuth tokens beyond what is required by the platform’s token system

• No end-user behavioral data outside advertising analytics explicitly permitted by Meta/Shopify APIs

  
  

2. How We Use Your Information

We use collected data only to:

• Unify and analyze advertising performance

• Apply optimized campaign structures

• Generate real-time AI insights and recommendations

• Provide support, debugging, and service improvements

• Improve app stability, accuracy, and security

We never sell, rent, or trade your data to third parties.

3. Sharing Your Information

We may share your data only under these conditions:

• With Shopify, as required for app operation and in compliance with their platform terms

• With infrastructure providers (e.g., hosting, analytics) under strict confidentiality and data-processing agreements

• With law enforcement, only when legally required

All third parties are obligated to meet security standards equivalent to ours.

4. Data Retention

We retain your data only as long as necessary to provide the app’s functionality or comply with legal obligations.

You may request full deletion at any time by writing to support@roascraft.ai.

5. Data Security & Protection Measures

We use industry-standard technical and organizational security controls to safeguard sensitive and non-sensitive data:

5.1 Encryption

• Data in transit is protected using TLS 1.2+ encryption

• Data at rest is encrypted using AES-256 or equivalent encryption standards

5.2 Access Controls

• Role-based access (RBAC) restricting internal access to only authorized personnel

• Multi-factor authentication (MFA) enforced for administrative access

• All access is logged and monitored

5.3 Data Minimization

• We store only the minimum data required for ROASCraft functionality

• Sensitive categories are never downloaded, copied, or stored unless required for processing

5.4 Secure Infrastructure

• Hosting on secure, compliant cloud environments (Google Cloud/AWS)

• Firewalls, network segmentation, and automated threat detection

• Regular patching and vulnerability scanning

5.5 Incident Response

• Dedicated incident response workflow

• Notification commitment in accordance with applicable laws

• Immediate revocation of compromised access tokens

5.6 Third-Party Compliance

All service providers processing data on our behalf comply with security frameworks such as:

• ISO 27001

• SOC 2 Type II

• GDPR-aligned safeguards

5.7 No Unauthorized Data Transfer

We do not transfer sensitive or personal data to any third country without adequate protections.

6. Your Rights

You may request to:

• Access your data

• Update or correct data

• Request data deletion

• Withdraw consent

Contact us at support@roascraft.ai for any such request.

7. Changes to This Policy

We may update this policy from time to time. Changes will be posted with an updated effective date.

8. Contact Us

ROASCraft Support
Email: support@roascraft.ai