Privacy
draftWhat we collect, and why
Your email — sign-in is a magic link; there are no passwords.
First-party events from your site — if you install the tracking tag, we receive page views and conversion events (order references, values, and the identifiers your checkout already has), with the ad click and campaign that brought each visitor, how long they stayed and how far they scrolled, and a visitor id the tag keeps in their browser. A visitor who declines through your consent manager — Shopify's, Google Consent Mode, or a TCF one — is not tracked at all. We deduplicate and qualify conversions; refunds disqualify them.
Your site and your ad account — the engine reads your public pages and, once you connect Google Ads, your campaigns and the searches that showed your ads.
Webhook data — if you connect Stripe or Shopify, we receive the order events you authorize, for the same measurement purpose.
What we do not do
We do not sell data. We do not run ads in consent-required regions (EEA, UK, Switzerland) unless your site shows a consent signal we can read; the engine checks again every week, and if the signal is gone, those regions are excluded again — in code, not policy. We do not enrich your visitors' profiles from third parties.
Who processes it
Google Cloud hosts the engine and its database in the US, and runs the operators' maintenance jobs in Europe; Vercel serves this dashboard; Resend delivers sign-in emails; Stripe handles the subscription, with your email; Anthropic reads your site's pages and the searches that showed your ads, to choose keywords and to write and check ads — not your visitors' events. Each processor sees only what its job requires.
Retention and access
Decision logs and measurement data live for the life of your workspace. They are exported or deleted when you ask — write to gaurav@invizid.com, or see how to delete your data. Sessions expire after 30 idle days and are revocable server-side at any time.