1. Who we are
Scale: ChatGPT Ads Pixel (the "App") is provided by Sonex LLC ("we", "us"). The App lets Shopify merchants send conversion events from their online store to their own OpenAI Ads account. You can reach us at supportscale@gmail.com.
2. Our role
For information about the merchant and the merchant's account, we act as the data controller. For information about visitors and customers of a merchant's store, we act as a processor on the merchant's instructions, as set out in our Terms of Service. The merchant decides to install the App and to send these events to OpenAI Ads, and is responsible for informing its own customers and obtaining any consent required by law.
3. Information we process
Merchant information
- Shop domain and the access and session data Shopify provides so the App can run.
- The OpenAI Pixel ID and Conversions API key the merchant enters (the key is stored encrypted).
- On the Pro plan, optionally, a read-only OpenAI Ads advertiser key (stored encrypted, removable at any time) used only to read the merchant's ad spend from OpenAI Ads and compute ROAS.
- App settings, subscription plan, and monthly event counts.
Store visitor and customer information
When tracking is active, the App receives events from the merchant's store, such as page views, product views, add-to-cart, checkout started, and completed orders. An event can include:
- page address and referrer, event type, and timestamp;
- product identifiers, names, quantities, prices, order total, currency, and order number;
- the OpenAI click identifier ("oppref") when a visitor arrives from an OpenAI ad;
- the visitor's IP address and browser user agent;
- the customer's email address and phone number, when provided at checkout and when Shopify makes them available to the App.
Email addresses and phone numbers are normalized and converted to a one-way SHA-256 hash on our server before storage and transmission. We do not store them in readable form. The stored event record contains the hashed values, the IP address, and the user agent, together with the other fields listed above.
The App's pixel runs only according to the visitor's choices in Shopify's customer privacy settings: it is configured to require permission for analytics, marketing, and sale of data.
4. How we use information
- To forward events to the merchant's OpenAI Ads account through the OpenAI Conversions API.
- To show the merchant reports inside the App, such as funnel, revenue, and delivery status.
- To prevent duplicate events, enforce plan limits, secure the service, and provide support.
We do not sell personal information and we do not use it for our own advertising.
5. Who receives information
- OpenAI, which receives the events and the hashed identifiers for the merchant's own ads measurement. OpenAI handles that data under its own terms and privacy policy.
- Shopify, the platform through which the App is installed and operated.
- Our hosting provider (Railway), which runs our servers and database in the United States (US East).
6. International transfers
Our servers are located in the United States. If you are in the European Economic Area, the United Kingdom, or another region with transfer rules, information is transferred to the United States for processing as described in this policy.
7. Retention and deletion
- Event records are deleted automatically after 90 days. Monthly event counters, which contain no personal information, are kept while the App is installed.
- When a merchant uninstalls the App, we immediately stop tracking, delete the stored Conversions API key and advertiser key, and delete session data.
- After Shopify sends its shop erasure notice (about 48 hours after uninstalling), we delete all remaining data for that store.
- When Shopify sends a customer erasure request, we delete the event records that match that customer.
8. Security
Connections to the App use HTTPS. Conversions API keys are encrypted by the App before they are stored. Requests from a store's pixel to our servers are verified with a per-store signature. Access to our systems is limited to the people who need it and is protected with two-step verification. No system is completely secure, and we cannot guarantee absolute security.
9. Your rights and requests
Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information. If you are a customer of a merchant, please contact the merchant first. You can also write to us at supportscale@gmail.com and we will help the merchant respond. We also act on the data request and erasure notices Shopify sends us.
10. Children
The App is intended for merchants and is not directed at children.
11. Changes to this policy
We may update this policy. The date at the top shows when it was last changed.
12. Contact
Sonex LLC – supportscale@gmail.com