Privacy policy

Stetto LLC, a California limited liability company (“Stetto”, “we”, “us”), makes a canvas where ecommerce teams see their store, ad, email and analytics data in one place, and Stetto’s AI builds charts from it. This policy explains what we collect, why, who helps us process it, and the choices you have. It covers the Stetto app at app.getstetto.com and our website at getstetto.com.

The short version

• We collect what we need to run Stetto for you: your account details, what you build in Stetto, and the data from the platforms you choose to connect.
• Stetto only reads from the platforms you connect. We never change anything in your store, ad accounts or email platform.
• We don't sell your data, and we don't use it to advertise to you or anyone else.
• Your workspace's data is only visible to the people you give access to.
• You can disconnect a platform, leave a team, or delete a workspace or your account at any time, and the data goes with it.
• Our website uses Google Analytics to see how visitors find and use it. In the EU and EEA, the UK and Switzerland we ask first. The Stetto app never uses it.

What we collect

Account information. Your name and email address, and if you sign in with Google, your name and profile picture as Google shares them. If you set a password, our sign-in provider keeps only a one-way hash of it, never the password itself; if you turn on two-factor authentication, it keeps the secret your authenticator app uses. We use these to sign you in, show who's on a team, and send you confirmation codes, password resets and invites.

What you create. Your workspaces, decks, cards, frames, settings such as product costs, team membership and invites. Your conversations with Stetto stay in your browser; we keep only how many questions a workspace asks and what they cost (see Usage and technical data).

Data from platforms you connect. When someone in your workspace connects a platform such as Shopify, Meta, Google Ads, Google Analytics or Klaviyo, we read reporting data from it: for example orders, sales, refunds and products from your store; spend, impressions, clicks and conversions from ad accounts; sends, opens, clicks and attributed revenue from email platforms; and sessions and conversions from analytics. We store daily summaries of this data in your workspace so your charts load quickly, and a copy of each ad's creative (its picture, headline and text) so your cards can show it. From orders we keep the order number, date, products, amounts, ship-to country, sales channel and whether it was a first order, never who placed it: no customer names, emails, addresses or phone numbers. Stetto only reads from these platforms and never changes anything in them.

Usage and technical data. Basic logs needed to run and secure the service, such as when you sign in, errors, how many questions a workspace asks Stetto and what they cost, and your IP address in server logs. In the public demo, we keep a scrambled form of your network address to limit how many questions each visitor can ask each day.

Waitlist. If you join the waitlist on our website, we keep your email address to tell you when Stetto is on the Shopify App Store. Email support@getstetto.com and we'll remove it.

Demo feedback. If you send feedback from the public demo, we keep what you write, the email you give (if any) so we can reply, and which parts of the demo you tried (such as moving a card or switching regions). Email support@getstetto.com and we'll delete it.

Cookies. The Stetto app uses only essential cookies, such as one to keep you signed in and one to remember which workspace you have open. It uses no advertising or tracking cookies.

Analytics on our website. Our website (getstetto.com, including its public demo and these pages) uses Google Analytics to see how visitors find and use it: the pages you view, the site that sent you, your device and rough location, whether you join the waitlist (never the email you give), and in the demo which parts you try, such as moving a card or switching regions (never what you type or ask, or the numbers you see). It sets its own cookies to tell visits apart. Its advertising features are off, and we don't use advertising cookies or sell or share your information for advertising. If you're in the EU or EEA, the UK or Switzerland, we ask first, and no cookies are set unless you accept. Elsewhere it's on unless you turn it off here, and we treat your browser's Global Privacy Control signal as turning it off. Google keeps this data for up to 14 months, and its cookies last up to two years. The Stetto app never uses Google Analytics.

How we use it

• To provide Stetto: show your data on your decks, sync teammates' changes, and answer your questions to Stetto.
• To keep it secure and working: preventing abuse, setting usage limits, fixing bugs and supporting you.
• To communicate with you about your account, such as confirmation codes, password resets, invites and important service changes.

We don't sell your personal information or your workspace's data, and we don't use it for advertising.

Asking Stetto (AI)

When you ask Stetto a question, we send your question, the recent conversation, a description of the deck you're looking at, and the results of the queries it runs on your data to our AI model provider. It processes this only to answer your question, under commercial terms that don't allow it to train its models on this data. Stetto can only read your data through Stetto's own metric definitions; it can't change data in your connected platforms.

Who helps us run Stetto

We use these service providers, who process data on our behalf and only to provide their service to us:

• A cloud database and sign-in provider: storing your workspace, signing you in and syncing teammates' changes (hosted in the United States).
• A hosting provider: running the app and our website.
• An AI model provider: the model behind Stetto's answers, as described under Asking Stetto.
• A connections service: securely connecting to the platforms you link, and holding the access they grant.
• An email provider: sending sign-in, invite and support emails.
• An error-reporting service: so we hear when something in Stetto breaks: what failed and where, without your figures or personal details.
• Google Analytics: counting visits to our website, as described under Analytics on our website. Never the app.

Email support@getstetto.com for detailed provider information.

We may also share information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

Google user data

If you sign in with Google or connect a Google service such as Google Ads or Google Analytics, Stetto's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you see in Stetto, we don't transfer it except as needed to provide those features, for security, or as required by law, we don't use it for advertising, and people don't read it unless you ask us to, it's needed for security, or the law requires it.

• What we access. Signing in with Google: your name, email address, profile picture and Google's identifier for your account. Google Ads (the adwords scope): the ad accounts you can open (their name, ID, currency, time zone and status, and whether each is a manager account), and for the ones you choose, the names and IDs of their campaigns, ad groups and ads, and each day's cost, impressions, clicks, conversions and conversion value. Google Analytics (analytics.readonly): the GA4 accounts and properties you can open (their names), and for the properties you choose, their time zone and currency, and each day's sessions, engaged sessions, new users, key events and purchase revenue, by country and channel group.
• How we use it. To show it in your workspace's charts and cards, beside your store's sales, and to answer your questions about it when you ask Stetto. Nothing else.
• Who it goes to. Only the service providers that run Stetto for you, listed above: our database provider stores it, our hosting provider runs the app, our connections service holds the access you grant, and our AI model provider receives the results of the queries Stetto runs when you ask it a question. We don't sell Google user data or share it with advertisers, data brokers or anyone else.
• No AI training. Google user data, raw or aggregated, is never used to develop, improve or train AI or machine learning models, by us or by our AI model provider, whose commercial terms don't allow it.
• How it's protected. As described under Security: encrypted in transit and at rest, and readable only by the people your team gives access to, enforced in the database.
• How long we keep it. Until it's removed. Untick an account, or remove the connection from a workspace, and that workspace's copy is deleted straight away. Disconnect Google Ads or Google Analytics from your team, and every workspace's copy is deleted and Stetto's access to your Google account is revoked. Deleting a workspace deletes its copy; deleting your account deletes the teams only you are on (see Keeping and deleting data). You can also remove Stetto's access in your Google account at myaccount.google.com/permissions.

Who can see your workspace

A workspace's decks and data are visible only to the people its team admins give access to, and to team admins. Access is enforced in the database itself, not just in the app. Our team doesn't look at your workspace's data unless you ask us to help, it's needed to investigate a security or abuse problem, or the law requires it.

Keeping and deleting data

We keep your data while your account or workspace is active, and you can delete it yourself at any time, straight away:

• Remove a platform from a workspace (Connections): we delete the data it imported into that workspace. Unticking an ad account does the same for that account.
• Disconnect a platform from your team (Connections): we stop syncing it, remove the access it granted, and delete what it imported into every workspace.
• Delete a workspace (team admins, in Settings: the workspace's General page, or the team's Workspaces): its decks, imported data and creative copies are deleted. Connections belong to the team, so they stay for its other workspaces until an admin disconnects them.
• Delete your account (Settings, Account): teams only you are on are deleted with everything in them; on teams you share, you leave and the team keeps its work. Your sign-in is deleted too.
• Uninstall Stetto from your Shopify store: when Shopify tells us, 48 hours after you uninstall, we delete that store's data from every workspace it was connected to.

You can also ask us to delete your data, including data from Meta or Google, by emailing support@getstetto.com. We'll confirm and delete it within 30 days, except where we must keep something for legal reasons. Backups roll over and are cleared on their normal schedule.

Security

Data is encrypted in transit and at rest by our hosting providers. Access to each workspace is limited by row-level security in the database. Access to the platforms you connect is held by our connections service, except Shopify's, which we keep in our database encrypted (AES-256). No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.

Your rights

Depending on where you live, including the EU, the UK and California, you may have the right to access, correct, delete or export your personal information, and to object to or limit some processing. To make a request, email support@getstetto.com. We won't treat you differently for using these rights. If you're in the EU or UK, you can also complain to your local data protection authority. Data may be processed in the United States, where our providers are based.

Children

Stetto is a business tool and isn't meant for anyone under 16. We don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above, and for significant changes we'll tell you by email or in the app before they take effect.