LEGAL
Privacy Policy
This policy explains what GMCMax collects, why we collect it, and the controls available to you.
Information you provide
We store your name, email address, password hash, workspace name, and the store and advertising accounts you choose to connect. We never store your account passwords for Shopify or Google.
Shopify data
With your authorization, GMCMax reads store identity, products, variants, SKUs, barcodes, prices, inventory, costs, and order-line performance such as quantities, discounts, refunds, and revenue. We use this information for product-level reporting and optional product-protection automation. Product switches can publish or unpublish products on the Google & YouTube channel. After you activate the optional automation, it can unpublish qualifying products from that channel after synchronization. Automation does not change Shopify product status or publishing to other channels. If you turn on an archived product and explicitly confirm reactivation, GMCMax makes that product Active in Shopify before publishing it to Google & YouTube. Reactivation may make it available again on other channels where it was already listed. The manual action and its result are recorded for auditing. The setup guide displays the requested read and write scopes. GMCMax does not store Shopify customer profiles.
Account acknowledgments
For new registrations, GMCMax records when you accepted the Terms of Service, together with the version of the signup disclosure. Automation activation is recorded separately with the time and the workspace user who activated it. Historical signup acknowledgments are retained.
Google user and Google Ads data
With your authorization, GMCMax accesses the Google Ads customer accounts available to you and the selected account's Shopping offer, campaign, impression, click, cost, conversion, and conversion-value metrics. We use that data only to match advertising performance to your Shopify products and display analytics to authorized members of your workspace.
GMCMax's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for targeted advertising, or transfer it to data brokers.
How information is stored and shared
OAuth access and refresh tokens are encrypted before database storage. Traffic is transmitted over HTTPS. We use hosting and database infrastructure providers only to operate GMCMax; they process data on our behalf and are not permitted to use it for their own advertising.
Cookies
GMCMax uses an HTTP-only session cookie to keep you signed in and short-lived security cookies during OAuth authorization. We do not use third-party advertising cookies.
Retention and deletion
Disconnecting an integration removes its stored access credentials and stops future collection. Historical reporting data may remain in your workspace so your dashboard does not unexpectedly lose prior periods. Deleting a workspace permanently removes its memberships, credentials, connected-account metadata, products, mappings, and reporting data from the active database. Your account login and other workspaces remain.
Your choices
You can disconnect Shopify or Google Ads from the Connections page. Workspace owners can permanently delete the workspace from the Settings page. You may also request access, correction, export, or deletion by contacting general@369losangeles.com.
Changes and contact
We will update this page when our data practices materially change and, where required, ask you to consent before using connected data for a new purpose. Questions can be sent to general@369losangeles.com.