Skip to content

Draft. This text has not been approved yet and may change before release.

Privacy policy

Last updated:

This policy covers the website at merchadspro.com and your Merch Ads Pro account at account.merchadspro.com. The Chrome extension has its own policy: see the extension privacy policy.

Merch Ads Pro is operated by operator legal name and address ("we", "us").

The short version

  • The website has no analytics, no advertising trackers and no third-party scripts, fonts or images. Every file comes from merchadspro.com.
  • Your Merch sales, royalties and ad reports are never sent to us. They stay in the extension on your computer.
  • Your account holds your email address, your plan and your billing history. Payments are handled by Stripe; we never see your card number.
  • The only cookie on merchadspro.com is the partner cookie mp_ref, and only if you arrive through a partner's link.

What we collect on the website

The website does not use cookies for visitors who come directly, and it does not build a profile of you. Our web server keeps standard request logs (the requested address, time, IP address and browser identifier) to keep the site secure and working. These logs are deleted after log retention period.

When you open a partner's referral link (an address like merchadspro.com/r/code), we set one first-party cookie named mp_ref so that, if you create an account, the partner who referred you is credited.

  • What it contains: the partner's code and the time the cookie was set, signed so that it cannot be altered. It contains nothing about you.
  • Where it is sent: only to merchadspro.com and its subdomains, only over HTTPS. Scripts on the page cannot read it.
  • How long it lasts: 30 days. If you already have the cookie, a second partner's link does not replace it.
  • What we record: a count of link visits per partner per day. We do not store your IP address or browser details with that count.
  • How to avoid it: do not use referral links, or delete the cookie in your browser settings. The website and the product work the same without it.

If you create an account while the cookie is valid, your account is linked to that partner. The partner sees the number of sign-ups and paying customers they referred, never your name, email address or any other detail that identifies you.

Your account

When you create an account we collect:

  • Email address and password. The password is stored only as a secure hash. We use your email to sign you in, to send messages about your account and billing, and to tell you about important changes to the service.
  • Plan and subscription. Your plan, trial dates, subscription status and invoices.
  • Payment details. Payments are processed by Stripe. Stripe receives your card details directly; we receive only the card brand, the last four digits and the expiry date, so you can recognize the card in your account.
  • Sign-in records. The time of sign-ins and the devices where the extension is signed in, so you can see and end your sessions.
  • Support requests. What you send us through the support page in your account.

We do not sell your personal data and we do not use it for advertising.

We process account data to provide the service you signed up for (contract), billing records because the law requires us to keep them (legal obligation), and request logs and the partner cookie for our legitimate interest in running a secure service and a referral program.

Who receives your data

  • Stripe, to take payments and send invoices.
  • Our hosting provider, which runs our servers in the United States.
  • Cloudflare, which sits in front of our servers and passes on requests to the website and your account.
  • Mailgun, to deliver account and billing messages.

We share data with authorities only when the law requires it.

Because our servers are in the United States, your data may be transferred to and kept in a country other than your own.

How long we keep it

  • Account data: while your account exists, and up to 30 days after you delete it.
  • Invoices and billing records: as long as tax law requires, usually billing record retention period.
  • Request logs: log retention period.
  • The partner cookie: 30 days in your browser.

Your rights

You can see and change your email address in your account, download your billing history, and delete your account at any time. Depending on where you live, you may also have the right to access, correct, export or erase your personal data, to object to processing, and to complain to your data protection authority.

To use these rights, write to us through the support page in your account. If you cannot sign in, the sign-in page has a link to reset your password.

Changes to this policy

If we change this policy, we update the date at the top. If a change affects how we use your account data, we email you before it takes effect.