Privacy Policy

Privacy Policy

Last Updated:

1. Who We Are

CostRadar is a multi-platform profitability and cost-intelligence application for e-commerce merchants using Shopify, Amazon Seller Central, WooCommerce, BigCommerce, and/or Allegro, plus optional marketing, advertising, and automation integrations you choose to connect. The Service is provided by Radrly spółka z ograniczoną odpowiedzialnością (Radrly Sp. z o.o.), a Polish limited liability company.

By using CostRadar.ai, you acknowledge this Privacy Policy. If you do not agree, please do not use our services.

2. Controller / Processor Roles

Depending on the processing activity, CostRadar may act as:

  • Data controller (Radrly Sp. z o.o.) for account registration, authentication, billing identity, support communications, product analytics on our own systems, and marketing-site visitors.
  • Data processor for merchant store, order, product, inventory, and related commerce data synced from platforms you connect, which we process on your instructions to deliver the Service (see also our Data Processing Agreement).

    • Where you connect third-party tools (ads platforms, Zapier, MCP clients, etc.), those providers process data under their own terms for the scopes you authorize.

    3. Information We Collect

    3.1 Account & Identity

  • Email address (required)
  • Password (hashed; never stored in plaintext)
  • Name and profile fields you provide
  • OAuth identity from Google or GitHub when you sign in via those IdPs
  • Subscription / plan status and billing-related identifiers

    • 3.2 Team Member Data

  • Team member emails, names, roles (Admin, Editor, Viewer)
  • Invitation status and activity metadata

    • 3.3 Connected Store Platforms

    When you connect a store, we collect data authorized by that platform's OAuth/API scopes, which may include:

  • Shopify: shop domain/name, orders, products, discounts/pricing rules (as scoped), app subscription/billing metadata, GDPR webhook payloads
  • Amazon Seller Central: marketplace/account identifiers, orders, products, and inventory data via SP-API as authorized
  • WooCommerce: store URL/credentials or keys you provide, orders, products, and related commerce data
  • BigCommerce: store hash and API access token you provide, orders, products, and inventory metadata as authorized
  • Allegro: seller account identifiers, checkout orders, billing/fee entries, and optional buyer email as authorized, read-only (no listing edits, bid changes, or shipment create)
  • eBay: seller identifiers, fulfillment orders, order-linked fees, buyer refunds, and Promoted Listings billed charges as authorized, read-only
  • TikTok Shop: shop identifiers, order id, date, status, currency, amounts, fee lines, seller SKU, product name, quantity, and price. We do not persist buyer name, address, email, or phone. Read-only. No listing, order, or fulfillment changes.

    • 3.4 Cost, Financial & Integration Data

  • Manual cost entries and categorizations you create
  • Synced fee/cost metrics from connected stores and optional ad platforms
  • OAuth/API tokens and connection metadata for integrations you enable

    • 3.5 AI, MCP & Support Features

  • Prompts, chat messages, briefing context, and relevant business metrics sent to OpenAI to power AI features including: AI Insights, AI Profit Agent (in-app and channel), Briefing, Support Chat, cost auto-categorisation and colour suggestions, report analysis, Close Pack narrative, LTV agent, feedback suggestions, thread titles, and MCP-driven ask. Under OpenAI's standard API policy this data may be retained for up to 30 days for abuse monitoring. We have not enabled Zero Data Retention. We do not claim that prompts never contain a personal identifier.
  • In-app AI chat history and Profit Agent thread messages retained on a rolling 90-day TTL and removed on account deletion (see Data Retention Policy)
  • When you connect CostRadar MCP tools, an MCP client you authorize may read and write merchant data in CostRadar according to the tools you enable
  • When you connect Slack, Microsoft Teams, or WhatsApp as Profit Agent channels, message text and selected store metrics you choose to share may be delivered to those customer-connected platforms (same model as optional ads integrations). The Slack app asks for three bot permissions only (read messages that mention CostRadar, read direct messages sent to it, and post replies) and no user permissions

    • 3.6 First-Party Pixel / Attribution

    Where enabled, our first-party pixel / attribution features collect storefront event and attribution signals. Current implementation is Shopify-oriented; scope may expand as features ship.

    3.7 Usage, Security & Marketing Site

  • Log data, device/browser info, IP address (security and abuse prevention)
  • Cookie and similar technologies as described in our Cookie Policy (including GTM / Google Analytics / Ads and the LinkedIn Insight Tag when consented)
  • A cookieless count of marketing-site visits that include LinkedIn ad parameters: campaign parameters, landing path, and whether a LinkedIn click id was present. We do not store the click id, an IP address, or a browser identifier, and we do not send that count to LinkedIn. The LinkedIn Insight Tag still loads only after you accept marketing cookies.
  • Cloudflare Turnstile signals on signup and similar bot-protection flows

    • 4. Purposes of Processing

  • Provide, maintain, and secure the Service (contract / legitimate interests)
  • Authenticate users and manage teams (contract)
  • Sync and analyze multi-platform store costs and profitability (contract)
  • Generate AI-powered insights, chat answers, briefings, and support responses (contract / legitimate interests; Premium or feature-gated where applicable)
  • Process billing via Shopify Billing (Shopify shops) or Stripe (Amazon/Woo and non-Shopify billing paths) (contract / legal obligation)
  • Send service notifications and, if you opt in, marketing communications (consent where required)
  • Detect fraud, abuse (including promo-code abuse), and security incidents (legitimate interests / legal obligation)
  • Improve product performance and UX (legitimate interests; analytics cookies on consent where required)

    • 5. Recipients & Subprocessors

    We do not sell personal data. We share data with recipients only as needed to operate the Service or when you instruct us to connect an integration:

  • Self-hosted infrastructure, API, database, and auth at supabase.costradar.ai (Supabase-compatible stack we operate; not Supabase Inc. hosted US as primary)
  • Netlify (+ VPS static hosting), frontend delivery
  • Cloudflare, Turnstile bot protection
  • OpenAI, AI Insights, AI Profit Agent, Briefing, Support Chat, categorisation, report analysis, Close Pack, LTV agent, feedback suggestions, titles, MCP ask. Standard API retention up to 30 days. United States.
  • Slack / Microsoft Teams / WhatsApp (Meta), customer-connected Profit Agent channels only when you authorize them (message text and selected metrics you share)
  • TikTok Shop, when you connect a TikTok Shop. Order and fee data described in section 3.3. We do not sell that data.
  • eBay, when you connect an eBay shop
  • Stripe, billing for Amazon/Woo and applicable non-Shopify paths
  • Shopify, OAuth, store data, Shopify Billing, GDPR webhooks
  • Amazon, SP-API when you connect Seller Central
  • WooCommerce, your merchant store when connected
  • Meta / Google / TikTok Ads / Pinterest / Snapchat / Klaviyo, only when you connect them
  • Zapier, only when you use Zapier automations
  • GTM / Google Analytics / Google Ads, marketing site measurement (subject to Cookie Consent / Consent Mode)
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company): advertising measurement on the marketing site, loaded only after you accept marketing cookies
  • Google & GitHub, OAuth identity providers
  • SMTP email provider, transactional and support email

    • Google API data

    When you connect Google Ads or Google Analytics 4, CostRadar accesses Google Ads reporting data and GA4 analytics reports. That access is read-only. Scopes: https://www.googleapis.com/auth/adwords (used read-only) and https://www.googleapis.com/auth/analytics.readonly (read-only). We use this data only to show you your own profit and marketing metrics inside CostRadar. We do not sell it, we do not use it to serve ads, and we do not use it to train generalized AI models.

    CostRadar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    You can revoke access at any time by disconnecting Google Ads or Google Analytics in CostRadar, or by removing CostRadar at https://myaccount.google.com/permissions .

    We may also disclose data to comply with legal obligations, protect rights and safety, or in connection with a merger/acquisition with appropriate notice.

    6. International Transfers

    Merchant and account data is primarily processed on our self-hosted infrastructure. Some vendors (for example OpenAI, Stripe, Shopify, Google, GitHub, Netlify, Cloudflare, and advertising platforms you connect) may process data in the United States or other countries.

    Where GDPR applies to restricted transfers, we rely on appropriate safeguards such as EU Standard Contractual Clauses (SCCs), adequacy decisions, or vendor transfer mechanisms as applicable.

    7. Data Security

  • HTTPS with TLS 1.2 or TLS 1.3
  • bcrypt password hashing
  • JWT-based sessions and OAuth 2.0 for integrations
  • Integration/access tokens encrypted at rest with AES-GCM when our encryption key is configured on the server
  • Production access is limited to the CEO of Radrly sp. z o.o. We have not appointed a Data Protection Officer. Privacy contact: hello@costradar.ai

    • No method of transmission or storage is 100% secure. We use commercially reasonable measures but cannot guarantee absolute security.

    8. Retention

  • Account, shop, order, and cost data: while the account is active. Deleting the account starts a 30-day hold. You can sign in and cancel deletion during that window. If you do not, production data and the login are permanently deleted within 30 days.
  • Integration tokens: deleted when you disconnect the integration or delete the account. TikTok Shop and Walmart synced orders and fee lines are deleted within 30 days of disconnect.
  • Security and application logs: up to 90 days, including after account deletion
  • Backup copies: until the backup file is deleted. The backup scripts prune local folders after 30 days. A daily encrypted off-server job is planned by October 31, 2026 and is not running yet.
  • OpenAI: up to 30 days under the standard API policy

    • Details: Data Retention Policy.

    9. Your Rights

  • Access / portability: request or export your data
  • Correction: update inaccurate account data
  • Deletion: Settings → Account → Delete Account schedules deletion within 30 days. Sign back in during that window to restore, or email hello@costradar.ai
  • Restriction / objection: where applicable under GDPR
  • Opt-out: marketing emails and non-essential cookies via Cookie Settings / browser controls
  • CCPA: know, delete, and opt out of sale (we do not sell personal information)

    • Shopify merchants also benefit from Shopify GDPR webhooks (customers/shop redact and data request) that we process according to Shopify requirements.

    10. Cookies

    Essential cookies support auth and security. Analytics/marketing tags load according to your Cookie Consent choices and Google Consent Mode where implemented. See the Cookie Policy.

    11. Children

    The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

    12. Changes

    We may update this Policy by posting a revised version and updating the "Last Updated" date. Material changes may also be communicated in-product or by email when appropriate.

    13. Contact

    14. Compliance Orientation

  • GDPR and related EU/EEA privacy principles
  • CCPA/CPRA consumer rights (where applicable)
  • Shopify App Store privacy and GDPR webhook requirements (for Shopify installs)
  • Other applicable data-protection laws