Privacy policy
Last updated 18 October 2026
StoreAds is a Shopify app that sends a store's products to ChatGPT Ads and lets the merchant create, manage and measure their ChatGPT ad campaigns. This policy explains what the app collects, why, who it is shared with and how long it is kept.
What we collect
- The store's Shopify domain and the access token Shopify gives the app when it is installed.
- The merchant's ChatGPT Ads Advertiser API key and the password OpenAI issues for uploading the product file. Both are encrypted before they are stored.
- Product information, read from Shopify to build the product file: titles, descriptions, brands, product types, categories, variant options, prices, stock status, images and links.
- The IDs and settings of the campaigns the merchant creates in the app.
StoreAds does not read orders or customers, and holds no personal data about shoppers. Campaign results are fetched from OpenAI when the merchant opens the app and are not stored.
How we use it
Only to keep the store's products current in ChatGPT Ads, to create and change campaigns when the merchant asks, and to show the merchant their results. We do not sell data or use it for our own advertising.
Who we share it with
- OpenAI, on the merchant's instruction: the product file and the campaigns the merchant creates. OpenAI's own privacy policy governs what it does with that data.
- Our service providers, who store or process data for us and for no other purpose: DigitalOcean (hosting, United States) and Neon (database, United States).
- Authorities, where the law requires it.
How long we keep it
- Product information is not stored, apart from a short list of products that couldn't be sent and why, replaced on every sync.
- Everything we hold for a store, including its API key: deleted when Shopify tells us the store has removed the app (48 hours after uninstalling).
Security
All traffic is encrypted in transit (HTTPS). API keys and passwords are encrypted at rest (AES-256-GCM). Access to the servers and database is limited to the developer.
Your rights
Depending on where you live (for example under the GDPR or the CCPA), you may ask to see, correct or delete personal data held about you. Merchants can remove the app at any time, which deletes their data as described above.
Changes
If this policy changes, the date at the top changes too. Material changes are announced to merchants in the app.