Privacy Policy

Ecombooster WGT AB is the data controller for data about website visitors, about you when you contact us, and about user accounts in the platform.

When you as a customer process personal data in the platform, for example orders containing your customers' contact details, you are the controller and we are your processor. We then process the data on your instructions, and we sign a data processing agreement on request.

Contact us at info@ecombooster.io with questions.

The data we process depends on which features and integrations you use. We always process account data. Other data is processed only when the feature is in use:

• Account data: names, email addresses and login credentials of users.
• Business data: products, prices, stock levels and supplier data that you upload or fetch through integrations.
• Order data: if you use order management, we fetch orders from connected ecommerce platforms, including your customers' names, addresses, email addresses and phone numbers.
• Email: if you connect a Microsoft Outlook mailbox, we read and send email in it for the features you use.
• Data from connected services: if you connect, for example, Google services, as described below.

You can connect Google services to Ecombooster to get statistics and analysis in the platform. The connection uses Google OAuth, and we only receive the access you approve. We do not request access to your name, email address or Google profile.

• Google Search Console (read-only): search queries, pages, country and device, with clicks, impressions, click-through rate and average position, for the properties you choose. We use this data for SEO overviews, content improvement suggestions and choosing keywords for AI-generated product and category texts.
• Google Analytics 4 (read-only): aggregated statistics per page and day, such as sessions, users, page views, bounce rate, engagement, traffic sources, transactions and revenue. We do not fetch data about individual visitors. The data is used for traffic and conversion overviews per page.
• Google Merchant Center: we read the status of your products, including approvals and rejection reasons per destination, and clicks, impressions and conversions per product, so you can see which products need attention and how they perform. We do not change any products or settings in your Merchant Center account. The only thing we send is a request, right after we have generated the product feed you have set up in Merchant Center, for Merchant Center to fetch that file, so that new prices and stock reach Google at once. Google requires our Google Cloud project to be registered for its API; we have registered it with Ecombooster's own Merchant Center account, not with yours.
• Google Ads: campaigns (name, status, type and budget), ad costs, and clicks, impressions and conversions per product. The data is used to show ad cost and profitability per product. We do not create or change any campaigns, ads or budgets.

Data from Google services is used only to provide and improve the features you see in Ecombooster. We:

• never sell the data,
• do not use it for advertising, retargeting or interest-based ads,
• do not use it to determine creditworthiness or for lending purposes,
• do not use it to train generalized AI or machine learning models,
• do not transfer it to third parties, except to the processors needed to deliver the feature, with your consent, when required by law, or as part of a merger or acquisition where the recipient continues to follow this policy.

Our staff do not read the data, except when you ask us to (for example in a support case), when needed for security purposes or to comply with the law, or when the data is aggregated and anonymized for internal operations.

When you use AI features, such as SEO analysis or AI-generated product texts, selected data (search queries and aggregated figures on traffic, conversion and ad cost) is sent to our AI provider, Anthropic or OpenAI, to produce the analysis or text. The providers process it under their API terms, which do not allow it to be used to train their models. Keywords from Search Console may also be sent to DataForSEO to fetch search volumes.

Access tokens from Google are stored encrypted, separately for each customer and each connected account, and are used only to fetch that customer's data. Data from Google is stored on AWS servers in Stockholm (eu-north-1), linked to your company account, and encrypted in transit. Only users in your company account and authorized staff at Ecombooster have access to it.

We keep data from a Google service for as long as the connection is active. You can revoke our access at any time under Third-party apps & services in your Google Account. We then stop fetching new data. If you ask us to remove a connection, or when your customer agreement ends, we delete the stored tokens and the data fetched from that service within 30 days.

We use AI models from Anthropic (Claude) and OpenAI for features such as product copy, attribute extraction, translation and analysis. The models are called through the providers' business APIs, and only the data needed for the task is sent.

• No training: under the providers' terms, data sent through the API is not used to train their models. We have not opted in to share data with them for training.
• No general-purpose models of our own: Ecombooster does not train its own general-purpose AI models on customer data or on data from Google.
• Your content is yours: text the AI produces for you belongs to you, like all other data in your account.

Read more in Anthropic's and OpenAI's descriptions of how API data is handled.

Ecombooster's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell personal data and do not share it with third parties for marketing purposes. We use the following providers to run the service:

• Amazon Web Services: hosting and storage (Stockholm).
• Anthropic and OpenAI: AI features such as text generation and analysis.
• DeepL and Google Cloud Translation: translation of product texts.
• DataForSEO: search volumes and market data for keywords and products. No personal data is sent.
• SendGrid: sending email from the platform.
• Sentry: error monitoring. Error reports may contain technical data such as IP addresses.
• Google Analytics: statistics on visits to the website.

We also exchange data with the services you connect to the platform yourself: ecommerce platforms (for example Shopify, WooCommerce, PrestaShop, Norce, Vendre, Nyehandel and Kodmyran), Fraktjakt if you book shipping through the platform (the recipient's name, address and contact details), Microsoft Outlook, Google and Meta. Their own terms and privacy policies apply to data held by them.

Some providers, including Anthropic, OpenAI, SendGrid and Sentry, may process data outside the EU/EEA. Such transfers rely on the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.