AD Product Lab is a creator program platform for Shopify brands. This policy explains what we collect, why we collect it, how long we keep it and how you can exercise your rights.
AD Product Lab operates the platform at adproductlab.com and the connected Shopify app. We are the data controller for the account, tracking and payout data described below. You can reach us any time at support@adproductlab.com.
Account data. Email address, password hash (managed by our authentication provider), display name and, for creators, an optional social handle. Used to create and secure your account.
Shopify store data. When a brand installs the app we store the store domain, an encrypted Shopify access token, product data (titles, images, prices, costs) and order data required to calculate commissions (order reference, totals, currency, financial and refund status). We do not store customer names, addresses or payment card data.
Click and attribution data. When someone opens a creator link we record the creator, the product, a timestamp, the referring website host and a coarse country code. IP addresses are never stored in raw form; where an IP is needed for abuse prevention it is hashed with a secret salt and cannot be reversed.
Payout data. Stripe Connect account identifiers and payout status. Tax, identity and bank details are collected and held by Stripe, not by us.
Support data. The name, email and message you send us through the contact page or by email.
To provide the service and perform our contract with you: accounts, product sync, commission calculation and payouts. To comply with legal and accounting obligations: subscription and payout records. For our legitimate interest in securing the platform: abuse prevention and aggregated usage statistics.
We use a first-party attribution cookie so that a sale can be credited to the creator who referred it. The attribution window is 30 days, which is also the cookie lifetime. A separate cookie stores your cookie choice for one year.
We do not use advertising, profiling or cross-site tracking cookies. If you decline cookies, the attribution cookie is not set; tracking then relies only on the link the visitor clicked.
Account data is kept while your account is active and deleted within 30 days of an account or app deletion request. Click and attribution records are kept for 24 months for reporting and dispute resolution. Order, commission and payout records are kept for up to 10 years where accounting law requires it. Support messages are kept for 24 months.
Shopify (store and order data, for the app to function), our hosting and database providers (to run the platform), and Stripe (to onboard creators and send payouts). All act as processors under contract, except Shopify and Stripe, which are independent controllers for their own services. We never sell personal data.
You have the right to access your data, correct it, delete it, restrict or object to processing, and receive a portable copy in a machine-readable format. You can also withdraw cookie consent at any time by declining in the cookie banner or clearing your browser cookies.
To exercise any right, email support@adproductlab.com from the address on your account. We respond within 30 days. Merchants can also trigger data requests and deletions through Shopify, which we handle automatically. You may lodge a complaint with your local data protection authority.
If we change this policy we will update this page and, for material changes, notify account holders by email.