ReportlyReportly

Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Reportly ("we", "us", "our") collects, uses, and protects information when you use our service at tryreportly.app and our Shopify app integration.

1. Information we collect

Account information

  • Email address (for login and report delivery)
  • Phone number (for WhatsApp delivery, optional)
  • Name and company name (for personalized reports)

Shopify store data (via OAuth)

  • Order data (count, total revenue, currency)
  • Product data (names, inventory counts)
  • Customer data (aggregate counts only — we do not store individual customer PII)
  • Store metadata (shop domain, currency, timezone)

Meta Ads data (via Meta Marketing API)

  • Ad account spend, impressions, clicks, conversions
  • Campaign and ad-set performance metrics
  • We do not access creative content or audience targeting details

Google Analytics 4 data (via Google Analytics API)

  • Session count, traffic sources, conversion events
  • Funnel completion rates

Usage data

  • Login timestamps and IP address (for security)
  • Pages visited within the Reportly dashboard
  • Reports generated (for billing and quota tracking)

2. How we use your data

  • Generate your daily, weekly, and monthly performance reports
  • Deliver reports via your chosen channels (Telegram, WhatsApp, Email)
  • Send billing receipts and subscription notifications
  • Provide customer support when you contact us
  • Improve our service using aggregated, anonymized analytics

We do not:

  • Sell your data to third parties
  • Use your data for advertising
  • Share your store data with competitors or other merchants

3. Third-party data sharing

We share data only with processors required to provide our service:

  • Resend (email delivery) — receives email addresses and report content
  • HyperSender (WhatsApp delivery) — receives phone numbers and report content
  • Telegram Bot API — receives Telegram chat IDs and report content
  • PayTabs (payment processing) — receives billing info only, not store data
  • Hostinger (hosting) — encrypted database hosting

All processors are bound by data processing agreements.

4. Data retention

  • Active accounts: retained while your subscription is active
  • Cancelled accounts: retained for 90 days, then permanently deleted
  • Backup snapshots: 90-day rolling window
  • Generated reports: retained for 1 year for your historical access
  • Audit logs: 1 year for security purposes

5. Your rights

You have the right to:

  • Access your data — export available in account settings
  • Correct inaccurate data — edit in account settings or email us
  • Delete your account — full data deletion within 30 days of request
  • Object to processing — email privacy@tryreportly.app
  • Data portability — JSON export available on request

Contact privacy@tryreportly.app to exercise any of these rights.

6. Shopify-specific compliance

We comply with Shopify's Partner Program Agreement and App Store data handling requirements:

  • We respond to GDPR data subject requests via the mandatory customers/data_request webhook
  • We delete customer data via the mandatory customers/redact webhook
  • We delete shop data via the mandatory shop/redact webhook
  • All Shopify API requests use OAuth — we never store or transmit passwords

7. Security

  • HTTPS/TLS encryption for all data in transit
  • Encrypted database storage (AES-256)
  • bcrypt-hashed passwords (no plaintext storage)
  • Two-factor authentication available for account login
  • Quarterly security reviews

8. Cookies

We use essential cookies for authentication only. We do not use tracking, advertising, or analytics cookies on tryreportly.app.

9. Children's privacy

Reportly is a B2B SaaS for businesses. We do not knowingly collect data from anyone under 18. If we learn we have, we delete it immediately.

10. International transfers

Your data may be processed in:

  • Kuwait (primary hosting via Hostinger)
  • USA (Resend, Google Cloud for GA4)
  • EU (some Hostinger backup regions)

We use Standard Contractual Clauses where required by GDPR.

11. Changes to this policy

We'll notify you via email if we make material changes. Continued use after notification constitutes acceptance.

12. Contact

For privacy questions, data requests, or concerns: