Privacy Policy

eComCockpit (“we”, operated by Solutionoir) is an operations platform for Shopify merchants. This policy explains what we collect when you install our app and how we use it.

Data we access from your Shopify store

• Store details: shop name, domain, currency, contact email.
• Products, variants, prices and inventory levels.
• Orders, including customer name, phone number and shipping address, needed to confirm orders, manage stock and courier bookings, and identify returned-to-origin risk.

How we use it

Solely to provide the eComCockpit service to you: order management, inventory sync, product publishing, reporting and support. We do not sell personal data or use it for advertising.

Customer phone numbers and the RTO network

If you opt in to the RTO network, we store a one-way hash of a customer’s phone number (not the number itself) so merchants can be warned about repeated undelivered or refused orders. The hash cannot be reversed into a phone number.

Ad platforms (Meta, TikTok)

A business can connect its advertising account to eComCockpit so that it can see its ad spend and results next to its orders and its books. Meta (Facebook) is the ad platform connected today; TikTok and any other ad platform we add follow the same rules. Connecting is always the business’s own choice, made by signing in to Facebook and approving access, and it is read-only.

What we read. With the ads_read permission, which is the only permission we ask for, we read:

• the ad accounts the login can see, so the person can choose which ones to track (we store only the accounts they choose: name, ID, currency, time zone, status and the business that owns the account);
• the campaigns of those accounts: name, objective, status and budget;
• daily spend and performance per campaign: amount spent, impressions, clicks, reach, purchases and purchase value;
• billing events of those accounts, such as charges to the ad account;
• your Facebook user ID and name, and the permissions you granted, only to label the connection.

We do not read your personal profile, posts, friends or messages. We do not create, change or pause ads, audiences or pixels, and we do not send your customers’ data to Meta or TikTok.

Why. To show the business how much its ad accounts delivered and spent, per store and per day, to compare that with the ad spend recorded in its books, and to tell which campaigns its orders came from. We use it for nothing else, we do not sell it, and we do not use it to target or send advertising ourselves.

Where it is stored. In the business’s own records in our encrypted database, kept separate from every other business (see Storage and security). The access token Facebook gives us is encrypted before it is stored, is only used on our servers, and is never shown in the app or sent to your browser.

Who can see it. The business’s owners and finance staff, and the owner of a store for the ad accounts and campaigns linked to that store. Support and logistics staff do not see it, and no other business can see a business’s ad accounts or campaigns; a business with a reporting link to a store sees only that store’s total daily ad spend.

How long we keep it. The daily spend and performance history is kept as part of the business’s accounting record for as long as the business has an account with us, even after the connection is removed. The access token is removed as soon as the connection is disconnected or a deletion request is processed.

How to disconnect. In eComCockpit, open Ads → Ad Accounts (the Ads settings page) and choose Disconnect on the Meta login. The stored access token is removed and nothing more is read. The ad accounts and spend history already recorded stay in the business’s records.

How to ask for deletion. In Facebook, open Settings → Business Integrations, find eComCockpit and remove it. Facebook then tells us, and we start the deletion described below; Facebook shows you a confirmation code and a link to a page where you can follow the progress (/legal/data-deletion). You can also email wajeeh@solutionoir.com and we will handle your request in the same way.

What deletion removes.

• Facebook access token. The sealed login credential used to read ad data is wiped, so nothing further can be read with it.
• Your Facebook user ID. Replaced by an irreversible one-way hash that cannot be turned back into your ID.
• Display name and granted permissions. The name Facebook gave us and the list of permissions you approved.
• Pending sign-in records. Any unfinished connection attempts (short-lived, single-use records).
• Stored provider error messages. Technical error text saved against your connection and its accounts.

What we keep, and why.

• Ad account records. Account name, currency and status of the ad accounts the business connected.
• Daily campaign spend and performance figures. The business's own advertising results, kept as part of its books.
• The business's expense ledger, statements and reports. Financial records the business owns and must be able to produce.

These are the connected business's own accounting records, which the business must keep for bookkeeping and tax purposes. They describe the business's advertising spend, not you as a Facebook user, and contain no Facebook user ID, name or access token.

Store customers’ order and checkout data used for advertising attribution

So a merchant can see which ads produced which sales, we keep next to each order the campaign tags of the page the customer arrived on (UTM tags and ad click identifiers), the site the visit came from and basic browser details. For a checkout that was started but not completed we also keep the contact details typed into it (name, email, phone number, city, province, country and postcode) and the cart, so the merchant can follow up and recover the order. These records do not hold the street address or the IP address. The contact details of a checkout that is not completed are removed from them 30 days after its last activity. Browser details, order note attributes, customer ID and click identifiers kept with an order are removed from them after 24 months, and the campaign figures stay. We do not sell this data.

Original copies of Shopify’s notifications. Shopify tells us about each order and checkout by sending a notification, and we keep that notification exactly as received, so that a step that failed can be repeated and so that past orders can be read again when we add a field. An original copy is the full message Shopify produced, so it can contain what the records above leave out: the customer’s street address, email address and phone number, and the IP address and browser details of the visit. Original copies are held in a restricted part of our database that no merchant screen or browser can read. They are not subject to the 30-day and 24-month periods above. They are kept while the merchant’s account is active and deleted when the store is erased (see Retention and deletion). A customer erasure request scrubs the person’s details from the records above; the original copies are removed when the store is erased.

Storage and security

Data is stored in encrypted databases hosted by Supabase and Google Cloud. Access is scoped per merchant account and enforced with row-level security. Shopify access tokens are stored server-side only.

Sharing

We share data only with infrastructure providers that process it on our behalf (Google Cloud, Supabase), and with couriers you choose to book through the platform. We do not share it otherwise, except where required by law.

Retention and deletion

We keep merchant data while your account is active. When you uninstall the app, we stop syncing; when Shopify sends a shop erasure request (48 hours after uninstall), we delete the store’s data. We respond to Shopify’s customer data request and customer erasure webhooks, scrubbing personal details while retaining non-identifying order records for accounting. The original copies of Shopify’s notifications described above are removed with the store’s data when the store is erased.

Your rights

Merchants and their customers may request access to or deletion of personal data at any time by emailing wajeeh@solutionoir.com. Customers may also make requests through the merchant.

Contact

Solutionoir — wajeeh@solutionoir.com

Last updated: October 13, 2026 · Solutionoir · wajeeh@solutionoir.com