Privacy Policy

This Privacy Policy describes how Mocha Analytics ("we", "us", or "our") collects, uses, and protects your information when you use our analytics dashboard service.

Information We Collect

We collect information from the following sources when you connect your accounts:

• Shopify: Order data, product information, customer information (name, email, purchase history), inventory levels, and return/refund data.
• Google Analytics 4: Session data, traffic sources, user behavior, conversion events, and page performance metrics.
• Google Ads: Campaign performance, ad spend, clicks, impressions, conversions, and ROAS metrics.
• Klaviyo: Email campaign metrics, flow performance, subscriber data, and engagement metrics.
• Meta Ads: Campaign performance, ad spend, impressions, clicks, and ROAS metrics from your Facebook and Instagram advertising.

We also collect account information you provide directly, including your name and email address.

How We Use Your Information

We use your information to:

• Display analytics dashboards showing your ecommerce performance
• Generate and deliver scheduled email reports to you and your team
• Provide insights and recommendations based on your data
• Display Google Ads campaign performance, spend efficiency, and ROAS metrics alongside your other ecommerce data
• Display Meta Ads campaign performance, spend efficiency, and ROAS metrics alongside your other ecommerce data
• Improve our service and develop new features
• Communicate with you about your account and service updates

Data Storage and Security

Your data is stored in secure, encrypted databases hosted on reputable cloud infrastructure. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) for all data transfers
• Encryption at rest for stored data
• Secure authentication with JWT tokens and httpOnly cookies
• Regular security audits and monitoring

In the event of a data breach affecting your Google Ads or Google Analytics data, we will notify affected users and Google within 24 hours in accordance with applicable regulations.

Third-Party Services

We use the following third-party services to operate Mocha Analytics:

• Google Analytics API and Google Ads API: To retrieve your analytics and advertising data
• Shopify API: To retrieve your store, order, and product data
• Klaviyo API: To retrieve your email marketing data
• Meta Marketing API: To retrieve your Facebook and Instagram advertising data
• SendGrid: To deliver email reports and notifications
• Stripe: To process subscription payments
• Sentry: For error monitoring and performance tracking

Google Ads Data Usage

Mocha Analytics accesses your Google Ads account data via the Google Ads API using read-only OAuth 2.0 authorization. For full details on our Google Ads integration, see our Google Ads Integration page.

Data types accessed:

• Campaign performance metrics (impressions, clicks, conversions, cost)
• Keyword and search term performance
• Shopping campaign and product group performance
• ROAS, CPC, and CPM calculations

This data is used solely to display analytics and performance insights within your Mocha Analytics dashboard and scheduled email reports. We do NOT:

• Use your Google Ads data for profiling, advertising, or targeting
• Sell, share, or transfer your Google Ads data to any third party
• Modify your campaigns, budgets, bids, or ad content
• Use your data for any purpose other than displaying analytics to you

All Google Ads data is subject to the same security and data retention policies described in this Privacy Policy. Mocha Analytics' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You may revoke Mocha Analytics's access to your Google Ads data at any time by disconnecting the integration in your Mocha Analytics account settings, or by removing access at myaccount.google.com/permissions.

Meta Ads Data Usage

Mocha Analytics accesses your Meta Ads account data via the Meta Marketing API using read-only OAuth 2.0 authorization. For full details on our Meta Ads integration, see our Meta Ads Integration page.

Data types accessed:

• Campaign performance metrics (impressions, clicks, spend, CPM, CPC)
• Ad set and ad creative performance
• Account-level spend and return on ad spend

This data is used solely to display analytics and performance insights within your Mocha Analytics dashboard and scheduled email reports. We do NOT:

• Use your Meta Ads data for profiling, advertising, or targeting
• Sell, share, or transfer your Meta Ads data to any third party
• Modify your campaigns, budgets, audiences, or ad creative
• Use your data for any purpose other than displaying analytics to you

You may revoke Mocha Analytics's access to your Meta Ads data at any time by disconnecting the integration in your Mocha Analytics account settings, or by removing access from your Meta Business Settings.

Data Retention

We retain your data for as long as your account is active. When you delete your account or uninstall the Shopify app, we will delete your data within 30 days, unless we are required to retain it for legal or regulatory purposes.

Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Revocation: Disconnect any integration from your Mocha Analytics account settings. Google services can also be revoked at myaccount.google.com/permissions

To exercise these rights, please contact us using the information below.

Cookies

We use essential cookies for authentication (session cookies). These cookies are necessary for the service to function and cannot be disabled. We do not use tracking cookies or advertising cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.