Margeny

Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains how Margeny (“Margeny”, “we”, “us”), operated by Diego Bermejo (sole trader / autónomo), Calle de Velázquez 15, 28001 Madrid, Spain, processes personal data. Margeny is a profit and margin analytics service for Shopify merchants.

1. Two roles: controller and processor

We act in two different capacities depending on the data:

  • As a controller for the personal data of the people who sign up for and use Margeny (our customers — merchants and their team members): your name, email address and authentication identifiers.
  • As a processor for the data we ingest from your connected store and ad accounts on your instruction — including your end customers’ personal data (name, email, order history). For that data you, the merchant, are the controller and we process it only to provide the analytics you asked for. See our Data Processing Addendum.

2. What we collect

  • Account data: your store name, contact email and the Shopify identifiers needed to link your store to your Margeny account. You access Margeny through your Shopify admin session; we run no separate login system.
  • Billing data: subscription status and identifiers. Charges are billed by Shopify on your Shopify invoice; we never see or store payment card details.
  • Connected store data: via the Shopify connection you authorise — orders, customers (including email), products, variants, refunds and payment transactions.
  • Connected ad data: daily, account-level advertising metrics (spend, impressions, clicks) from the ad platforms you connect (Meta, Google Ads, TikTok). See sections 4 and 5 for Google and Meta data.
  • Technical data: standard logs needed to operate and secure the service.

3. Why we process it and legal basis

  • To provide the service (performance of our contract with you).
  • To take payment and prevent abuse (legitimate interests; legal obligation for accounting).
  • End-customer store data is processed to produce your analytics, on your documented instructions as controller.

4. Google user data

If you connect Google Ads, you sign in with Google and grant Margeny the Google Ads API scope (https://www.googleapis.com/auth/adwords). This is how we handle the data we receive from Google:

  • What we access: the list of Google Ads accounts your Google login can reach (id, name and currency, so you can pick the one for your store) and, for the account you choose, daily account-level cost, impressions and clicks. We do not read your Gmail, contacts or any other Google data, and we never create, edit or delete campaigns, ads or budgets.
  • How we use it: only to show your advertising spend next to your store’s sales and margins inside Margeny (ad spend, MER, profit after ads, and the reports you configure).
  • How we store it: the OAuth refresh token is stored encrypted at rest (AES-256-GCM) in our EU-hosted database, and the daily metrics are stored in the same database, isolated to your account. See How we protect your data for the safeguards that apply.
  • Sharing: we do not sell Google user data, use it for advertising, or share it with third parties, other than the hosting sub-processors listed below that run the service on our behalf.
  • Revoking access and deletion: you can disconnect Google Ads in Margeny’s Settings at any time, which deletes the stored token, or revoke access at myaccount.google.com/permissions. Metrics for a disconnected account are deleted within 30 days, or sooner on request to privacy@margeny.com.

Margeny’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Meta (Facebook) data

If you connect Meta Ads, you log in with Facebook (Facebook Login for Business), choose which ad accounts to share, and grant Margeny the ads_read permission. This is how we handle the data we receive from Meta:

  • What we access: the ad accounts you chose to share (id, name and currency, so you can pick the one for your store) and, for the account you connect, daily account-level spend, impressions and clicks. We do not read your profile, friends, Pages, messages or any other Facebook or Instagram data, and we never create, edit or delete campaigns, ads or budgets.
  • How we use it: only to show your advertising spend next to your store’s sales and margins inside Margeny (ad spend, MER, profit after ads, and the reports you configure).
  • How we store it: the access token is stored encrypted at rest (AES-256-GCM) in our EU-hosted database, and the daily metrics are stored in the same database, isolated to your account.
  • Sharing: we do not sell Meta data, use it for advertising, or share it with third parties, other than the hosting sub-processors listed below that run the service on our behalf.
  • Revoking access and deleting your data: disconnect Meta Ads in Margeny’s Settings at any time, which deletes the stored token immediately; you can also remove Margeny from your Business Integrations in Meta Business settings. Metrics for a disconnected account are deleted within 30 days. To have all Meta data deleted right away, email privacy@margeny.com with your store domain and we will confirm the deletion within 30 days. Uninstalling Margeny from Shopify deletes all of your data as well.

TikTok data

If you connect TikTok Ads, you log in with your TikTok for Business account and choose which ad accounts to authorise. Margeny requests read-only reporting access. We access the ad accounts you authorised (id and name, so you can pick the one for your store) and, for the account you connect, daily account-level spend, impressions and clicks. We never create, edit or delete campaigns, ads, creatives, audiences or budgets, and we do not read your TikTok profile, videos or messages. The data is used, stored (access token encrypted at rest with AES-256-GCM, EU-hosted database) and shared exactly as described for Meta above: only to show your advertising spend inside Margeny, never sold or used for advertising. Disconnect TikTok Ads in Margeny’s Settings at any time, which deletes the stored token immediately; you can also revoke Margeny in your TikTok for Business account settings. Metrics for a disconnected account are deleted within 30 days, or sooner on request to privacy@margeny.com.

6. Where data is stored

Our primary database is hosted in the European Union (Supabase, EU region). Some sub-processors are located outside the EU; where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

7. How we protect your data

We treat access tokens and the data we receive from Shopify, Google and Meta as sensitive, and protect them with the following safeguards:

  • Encryption in transit: every connection to Margeny, and between our servers, our database and the Shopify, Google and Meta APIs, uses HTTPS/TLS.
  • Encryption at rest: OAuth refresh tokens and access tokens are encrypted by our application with AES-256-GCM before they are written to the database, using a key held as a server-side secret separate from the database. The database storage itself is also encrypted at rest by our hosting provider.
  • Tokens never leave our servers: tokens are never sent to your browser or exposed in the app; they are decrypted only server-side, at the moment a sync needs to call the platform’s API.
  • Account isolation: every record is tagged with its account and protected by database row-level security, so one merchant’s data can never be read by another account.
  • Restricted access: production systems are accessible only to the operator, with credentials kept in the hosting providers’ secret stores. No one reads your Google or Meta data except where you ask us to for support, where needed for security purposes (such as investigating abuse), or to comply with the law.
  • Minimal, read-only access: we request read-only permissions and store only account-level daily aggregates (spend, impressions, clicks), never campaign content or data about the people who see your ads.
  • Incident response: if a security incident affects your data, we will notify you without undue delay and, where required, the competent supervisory authority within 72 hours.

8. Sub-processors

We rely on the following providers to run Margeny:

  • Supabase — database hosting (EU region)
  • Vercel — web application hosting
  • Railway — background data-sync workers
  • Resend — transactional email
  • Shopify — app distribution, authentication and subscription billing, and (with Meta, Google and TikTok) the platforms you connect as data sources

9. Retention

We keep account and store data for as long as your account is active. When you disconnect a store or close your account, we delete or anonymise the associated data within 30 days, except where we must retain limited records for legal or accounting reasons.

10. Your rights

Subject to applicable law, you may request access to, correction or deletion of your personal data, and object to or restrict certain processing. For end customers’ data we process on a merchant’s behalf, requests should be directed to that merchant; we will assist them as their processor. To exercise your rights, contact us at privacy@margeny.com.

11. Changes

We may update this policy; we will revise the “last updated” date above and, for material changes, notify account holders.

12. Contact

Questions about this policy: privacy@margeny.com.