Get Started立即开始
Public policy

Privacy Policy

Last updated: August 7, 2026

1. Overview

semfeed provides ecommerce analytics, diagnostics, and AI-assisted reporting for teams that connect authorized commerce, advertising, and analytics accounts. This Privacy Policy explains how semfeed collects, uses, stores, shares, and protects information when you visit our website, create an account, connect a third-party platform, or use the service.

2. Data we collect

We may collect and process the following categories of information, depending on how you use semfeed:

  • Account information, including name, email address, authentication identifiers, language, timezone, and account settings.
  • Store and business information, including shop domain, shop identifiers, product metadata, inventory signals, order metrics, refund metrics, sales aggregates, and reporting preferences.
  • Advertising and analytics information, including ad account identifiers, campaign names and IDs, spend, impressions, clicks, conversions, traffic, sessions, ROAS, and other reporting aggregates.
  • OAuth and integration records, including granted scopes, connected resources, token status, timestamps, and connection health.
  • Usage and technical information, including log events, IP-derived security metadata, device and browser information, error reports, and operational audit logs.
  • Support communications, including messages you send to us and information needed to respond to privacy, security, or account requests.

3. Connected platform data

You decide which third-party platforms and resources to connect. semfeed requests access only through authorization flows such as OAuth, and uses connected data to provide the product features you choose, such as dashboards, metric synchronization, diagnostics, alerts, action tasks, and reports.

Shopify data may be used to display store performance, product and inventory signals, order and refund metrics, and store-level reporting. Google Ads, Google Analytics, and Google Search Console data may be used to show campaign, spend, traffic, organic search, and conversion context. We do not sell connected platform data.

4. Google user data

If you connect a Google account, semfeed uses Google user data only to provide or improve user-facing features that are visible in the product, including analytics dashboards, Google Ads reporting, Google Search Console organic performance, conversion context, synchronization, diagnostics, and account connection management.

Depending on the connections you enable, Google user data may include: Google Analytics (GA4) aggregated traffic and conversion metrics for properties you select; Google Ads campaign performance metrics for customer accounts you select; and Google Search Console search performance metrics (such as queries, pages, impressions, clicks, CTR, and average position) for verified sites you select. We request read-only access where available (for example Search Console and Analytics read scopes).

semfeed does not sell Google user data, does not use Google user data for advertising targeting, and does not transfer Google user data except as necessary to provide or improve the service, comply with applicable law, protect the service, complete a merger or similar transaction with appropriate safeguards, or with your consent. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

5. How we use information

  • To authenticate users, maintain sessions, and manage accounts.
  • To connect, validate, synchronize, and monitor authorized third-party data sources.
  • To generate dashboards, charts, diagnostics, alerts, action tasks, and AI-assisted reports.
  • To operate, secure, debug, measure, and improve the service.
  • To prevent abuse, investigate failures, enforce our terms, and comply with legal obligations.
  • To respond to support, access, correction, deletion, and privacy requests.

6. Data protection mechanisms for sensitive data

semfeed applies administrative and technical safeguards designed to protect personal information and sensitive credentials, including OAuth tokens and Google user data:

  • Encryption in transit: TLS/HTTPS for traffic between browsers, our application and API servers, and Google / commerce platform APIs.
  • Encryption at rest for secrets: OAuth access tokens and refresh tokens are encrypted with application-level encryption before they are stored in our database, and are decrypted only when needed to call the corresponding APIs.
  • Access control: authenticated sessions, shop- or workspace-scoped authorization checks, and least-privilege access for backend services.
  • Credential isolation: client secrets and developer credentials remain in server-side configuration and are not exposed on public website pages or in the browser.
  • Connection controls: you can disconnect Google Analytics, Google Ads, Google Search Console, and other sources in the application, which clears the local connection record and stops further sync from that source. You may also revoke access in your Google Account third-party settings.
  • Operational monitoring: we retain operational diagnostics and audit signals needed for reliability and security, and we respond to security or privacy incidents as required by applicable law.

Additional detail is published on our Security and Data Handling page.

7. Sharing and service providers

We may share information with service providers that help us operate semfeed, such as hosting, database, authentication, monitoring, email, analytics, and AI infrastructure providers. These providers are allowed to process information only as needed to provide services to us and are expected to protect that information. We may also disclose information if required by law, to protect rights and security, or as part of a merger, acquisition, financing, or sale of assets.

We do not sell personal information or connected commerce, advertising, or analytics data.

8. Retention and deletion

We retain information for as long as needed to provide the service, maintain security, meet legal obligations, resolve disputes, and enforce agreements. OAuth tokens are retained only while a connection remains active for your workspace. You may disconnect integrations in the product or request deletion of account and connected-source data. After verifying the request, we will delete or de-identify information unless retention is required for security, legal, fraud prevention, or accounting reasons.

For Shopify privacy requests and app removal events, semfeed is designed to process the required Shopify compliance webhooks for customer data requests, customer redaction, and shop redaction.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, or object to certain processing of your personal information. You can also disconnect third-party integrations to stop future synchronization from those sources. We may need to verify your identity or authority before completing a request.

10. Children

semfeed is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by applicable law or through the service.

12. Contact

Privacy, access, deletion, and data handling requests can be sent to taow23044@gmail.com.