Privacy policy
EcomVital (also called ProfitDesk inside the app) is operated by Value Ventures Limited, Unit B, 3/F, Kai Wan House, 146 Tung Choi Street, Mongkok, Kowloon, Hong Kong (company no. 73922982) ("we", "us"). EcomVital is currently in private beta: it is used by our own business to run our own Shopify stores, by our team members whom we invite. This policy explains what data the app handles, why, and the choices available.
1. Who this covers
- Our team members who log in to EcomVital.
- Businesses whose accounts we connect: our own Shopify stores, Google and Meta ad accounts, payment accounts and support mailboxes.
- Shoppers and customers of our stores, whose orders, store visits and support emails the app processes for us.
- People who register interest in the beta on ecomvital.com.
2. What we collect and why
| Source | What | Why |
|---|---|---|
| Shopify (our stores) | Orders (items, totals, taxes, refunds, payment gateway, shipping address, customer name and email), products and prices, fulfilments and tracking numbers. | Calculating sales, product cost and profit; tracking parcels; answering customer emails; managing our products. |
| Our storefronts | Page views, products viewed, adds to cart, checkouts and purchases, with the ad click that brought the visit (UTM tags, Google/Meta click ids), browser type, IP address, and, when given at checkout, a one-way hashed email and phone. Optional session recordings of browsing (what is typed is never recorded; checkout and account pages are never recorded). | Measuring which ads lead to sales; sending conversions to the ad platforms; improving the stores. |
| Google (with our permission) | Google Ads reports, campaigns and product lists of our own ad accounts; a Google Sheet we own; sending email from our own support mailbox (gmail.send scope only); uploading conversions (Data Manager). | Ad spend and product reports; making campaign changes we approve; replying to customers; telling Google Ads which ads led to purchases. |
| Meta (with our permission) | Ad spend and results of our ad accounts; WhatsApp Business messages between our team and the assistant. | Profit and ad reports; letting our team use the assistant on WhatsApp. |
| Our support mailboxes | Customer emails and attachments, our replies. | Sorting and answering customer service requests. |
| Payment accounts (PayPal, Airwallex) | Balances, transactions, fees, refunds and disputes. For our own checkout, card payments are handled by Airwallex; card numbers never reach our servers. | Cash flow, fees, expenses, disputes, and taking payments for our stores. |
| ecomvital.com | Name, email, store website and the answers you give when you register interest. | Contacting you about the beta. |
3. Google user data
EcomVital's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the features described above, which the signed-in user sees and controls.
- We do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide these features, to comply with law, or as part of a merger or sale with notice.
- We do not use Google user data to develop, improve or train generalised AI or machine-learning models.
- No person reads Google user data except with the user's consent, for security, to comply with law, or when the data is aggregated and anonymised.
- Changes to Google Ads campaigns are only made when a team member approves them, or under rules a team member set up, and are logged with undo.
4. Service providers
We use these providers to run EcomVital. Each processes data only to provide its service to us: Railway (hosting and storage, USA), Shopify, Google, Meta, PayPal, Airwallex, 17TRACK (parcel tracking), Anthropic (AI used to sort emails, draft replies, read invoices and answer questions in the app) and OpenAI (turning voice notes into text). Under these providers' API terms, the data we send is not used to train their models.
5. Storage, security and retention
- Data is stored on our private server, reachable only over encrypted connections (HTTPS) and only by logged-in team members, each with their own access level.
- Passwords are stored hashed. Access keys for connected services are stored on our server and never shown back in full.
- Email attachments are kept for 60 days after last opened; session recordings for the days set per store; other business records while needed for accounting and tax.
- Interest registrations are kept until the beta opens or you ask us to delete them.
6. Your choices
- Connected accounts can be disconnected at any time: Google (myaccount.google.com/permissions), Shopify (Settings → Apps), Meta (Business settings). Data received through a connection is deleted on request.
- Shoppers can ask the store they bought from, or us, for a copy or deletion of their data, and can decline analytics in the store's cookie banner.
- To access, correct or delete your data, email hello@ecomvital.com. We reply within 30 days.
7. Children
EcomVital is a business tool and is not directed at anyone under 18.
8. Changes
We'll update this page when the app changes and show the new date above. Material changes will be announced to team members in the app.
9. Contact
Value Ventures Limited · hello@ecomvital.com