Privacy Policy

Last updated: April 3, 2026

1. Introduction

BrandDNA ("we", "us", or "our") operates the BrandDNA platform at constructcli.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our Shopify application.

2. Information We Collect

We collect information in the following ways:

  • Account Information: When you create an account, we collect your name, email address, and authentication credentials.
  • Shopify Store Data: When you connect your Shopify store, we access product catalog data, order analytics, and inventory information through the Shopify API. We do not store customer personal data — all customer and order data is queried live via the Shopify API and is not persisted in our database.
  • Meta Ads Data: When you connect your Meta Ads account, we access ad performance metrics, campaign data, and ad creative information.
  • Usage Data: We collect information about how you use our service, including pages visited, features used, and interaction patterns.

3. How We Use Your Information

  • To provide and maintain our competitive intelligence service
  • To analyze your brand positioning and generate AI-powered insights
  • To track competitor ad activity and market trends
  • To sync product data from your connected platforms
  • To improve and personalize your experience
  • To communicate with you about your account and service updates

4. Data Security

We implement industry-standard security measures to protect your data. All API access tokens (Shopify, Meta) are encrypted using AES-256-GCM encryption before storage. All data transmission occurs over HTTPS with valid TLS certificates. We follow the principle of least privilege when requesting API access scopes.

5. Data Retention and Deletion

We retain your data for as long as your account is active. When you disconnect a platform integration, we immediately revoke access and mark the connection as inactive. When you uninstall our Shopify app, we delete all associated Shopify data including encrypted access tokens, synced products, KPI snapshots, and AI-generated memories within 48 hours as required by Shopify's compliance framework.

6. Third-Party Services

We use the following third-party services:

  • Shopify: For e-commerce data integration
  • Meta (Facebook): For advertising data integration
  • Anthropic (Claude AI): For AI-powered analysis and insights
  • Stripe: For payment processing
  • AWS: For media storage (S3) and content delivery (CloudFront)

7. Shopify Data Practices

Our Shopify integration accesses your store data solely to provide competitive intelligence and analytics features. We do not sell, rent, or share your Shopify store data with third parties. Customer personal information accessed through the Shopify API is queried in real-time and is not stored in our database. We comply with all Shopify API Terms of Use and mandatory compliance webhooks (customer data requests, customer data erasure, and shop data erasure).

8. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect any third-party integration at any time
  • Export your data
  • Withdraw consent for data processing

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@constructcli.com.