Legal

Privacy Policy

Last updated: August 25, 2026

Overview

Brod Analytics ("Brod Analytics," "we," "us," or "our") provides ecommerce analytics, attribution, and reporting services that connect to your online store and marketing platforms. This Privacy Policy explains what information we collect, how we use it, and the choices you have, when you use our website and application (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect two categories of information: information that identifies you as a Brod Analytics account holder, and information about visitors and customers on your connected store that we process on your behalf to provide analytics.

Account holder data — information that identifies you, the merchant using the Service:

• Account information you provide when you register, such as your name, email address, company name, and password.
• Usage data, such as pages visited, features used, and actions taken within the Service.
• Device and log data about your own access to the Service, including IP address, browser type, and access timestamps.

Storefront & tracking data — information about your store's customers and visitors, collected from your connected platforms and our own tracking script so we can provide analytics, attribution, and recommendations. This is the data our Service exists to analyze, and includes:

• Store and order data synced from connected ecommerce platforms, including orders, products, and customers.
• Traffic and session data, such as pageviews, referrers, UTM parameters, and other attribution signals collected via our tracking script on your storefront.

How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including dashboards, reports, and recommendations;
• Process and display analytics derived from your connected store and marketing accounts;
• Communicate with you about your account, updates, and support requests;
• Monitor and improve the performance, security, and reliability of the Service;
• Comply with legal obligations.

Store & Platform Data (Shopify, BigCommerce)

When you connect a store (such as Shopify or BigCommerce), we access store data through the platform's official APIs, using only the permissions ("scopes") required to deliver our analytics features. This may include orders, customers, products, and storefront traffic data.

We do not sell customer data obtained from connected stores. If a store is uninstalled or disconnected, we process data deletion or redaction requests in accordance with the requirements of the originating platform (for example, Shopify's mandatory customer data request, customer redact, and shop redact webhooks).

Third-Party Integrations

The Service may integrate with additional third-party platforms you choose to connect, such as Klaviyo, Google Ads, and Semrush. When you connect these integrations, we retrieve data made available through each platform's API solely to power the reporting and recommendations you request. Your use of those third-party platforms remains subject to their own privacy policies and terms.

Sharing of Information

We do not sell your personal information. We may share information with:

• Service providers who perform functions on our behalf (such as hosting, infrastructure, and analytics), under confidentiality obligations;
• Other members of your organization who have access to your Brod Analytics account;
• Authorities, when required by law or to protect our rights, users, or the public.

Data Retention

We retain account holder data for as long as your account is active or as needed to provide the Service. If you close your account or disconnect a store, we will delete or anonymize your data within a reasonable period, except where retention is required for legal, tax, or security purposes.

Raw storefront and tracking data is retained for 90 days from collection, after which it is deleted or aggregated. Aggregated or de-identified analytics derived from this data may be retained longer.

Data Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit and at rest, encrypted backups, access controls, webhook signature verification, and separation between production and non-production environments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Automated Decision-Making & AI

The Service uses artificial intelligence, including large language models provided by Anthropic, to help generate recommendations, summaries, and content suggestions. Classification, scoring, and ranking within the Service are performed by deterministic rule-based logic, not by AI, and are not automated decisions that produce legal or similarly significant effects about individual customers of your store. AI is used only to explain, summarize, or assist with content generation, which you review before use.

Your Rights & Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can update your account details within the Service or contact us to make a request. Store owners and their customers may also submit data requests directly through the connected ecommerce platform where applicable.

Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may limit some functionality.

Where a connected store platform communicates a customer's consent or tracking preference to us (for example, via Shopify's or BigCommerce's customer privacy APIs), we apply that preference to our data collection for that customer.

Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected].