Privacy Policy

EcomTracker ("we", "our", or "us") operates the EcomTracker web application at ecomtracker.ahmadsalhi650.workers.dev. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect the following types of information:

• Account information: Your email address and password (stored securely via Firebase Authentication)
• Business data you enter: Product names, costs, prices, revenue figures, and monthly profit entries
• Ad platform data: Campaign spend and conversion metrics fetched from Meta Ads and Google Ads via their official APIs
• OAuth tokens: Access tokens and refresh tokens for Meta and Google Ads, stored securely server-side

2. How We Use Your Information

Your data is used solely to provide the EcomTracker service:

• To calculate and display your e-commerce profit metrics
• To fetch ad spend data from your connected ad platforms
• To sync your data across devices via Firebase Firestore
• To send important account-related emails (e.g. password reset)

We do not sell your data, share it with third parties for advertising, or use it for any purpose other than providing the service.

3. Google Ads Data

When you connect your Google Ads account, EcomTracker accesses the following data via the Google Ads API:

• Campaign names
• Campaign cost (spend) data
• Conversion metrics

This data is used only to populate your profit tracking dashboard. It is stored in your private Firestore database, accessible only to you. We do not use Google Ads data for any secondary purpose, do not share it with third parties, and do not use it to serve advertising.

Our use of Google Ads API data complies with Google API Services User Data Policy.

4. Meta / Facebook Ads Data

When you connect your Meta Ads account, EcomTracker accesses campaign spend data via the Meta Marketing API. This data is used only to display your ad spend within your private dashboard and is not shared or sold.

5. Data Storage & Security

• All user data is stored in Firebase Firestore with per-user access rules — no user can access another user's data
• OAuth tokens are stored server-side in our Cloudflare Worker environment and never exposed in client-side code
• All data is transmitted over HTTPS (TLS encryption)
• We use Firebase Authentication for secure login management

6. Data Retention & Deletion

You can delete your account and all associated data at any time from the app settings. Upon deletion, all your data is permanently removed from our systems within 30 days.

You can disconnect any ad platform connection (Meta, Google) at any time from the Data Import page. Disconnecting revokes our access to your ad account data.

7. Cookies

EcomTracker uses minimal browser storage (localStorage) to maintain your session and app preferences. We do not use tracking cookies or third-party analytics cookies.

8. Third-Party Services

EcomTracker uses the following third-party services:

• Firebase (Google) — Authentication and database storage
• Cloudflare Workers — Application hosting and API proxy
• Meta Marketing API — Ad spend data retrieval
• Google Ads API — Campaign data retrieval

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Withdraw consent for ad platform connections at any time

10. Contact Us

For any privacy-related questions or requests, contact us at: salhi.ltd.company@gmail.com