Privacy Policy

This Privacy Policy explains how SALHI LTD ("we", "our", or "us"), a company registered in England and Wales under company number 16381366 with its registered office at 128 City Road, London EC1V 2NX, United Kingdom, collects, uses, and protects information when you use the EcomTracker website (ecomtracker.co), the EcomTracker application (app.ecomtracker.co), and any related services (collectively, the "Service").

SALHI LTD is the data controller for the personal data we process about you. For any privacy-related questions, contact us at info@ecomtracker.co.

1. Information We Collect

We collect the following types of information:

• Account information: Your email address and password (stored securely via Firebase Authentication)
• Business data you enter: Product names, costs, prices, revenue figures, and monthly profit entries
• Ad platform data: Campaign spend and conversion metrics fetched from Meta Ads and Google Ads via their official APIs
• OAuth tokens: Access tokens and refresh tokens for Meta and Google Ads, stored securely server-side

2. How We Use Your Information

Your data is used solely to provide the EcomTracker service:

• To calculate and display your e-commerce profit metrics
• To fetch ad spend data from your connected ad platforms
• To sync your data across devices via Firebase Firestore
• To send important account-related emails (e.g. password reset)

We do not sell your data, share it with third parties for advertising, or use it for any purpose other than providing the service.

3. Google Ads Data

When you connect your Google Ads account, EcomTracker accesses the following data via the Google Ads API:

• Campaign names
• Campaign cost (spend) data
• Conversion metrics

This data is used only to populate your profit tracking dashboard. It is stored in your private Firestore database, accessible only to you. We do not use Google Ads data for any secondary purpose, do not share it with third parties, and do not use it to serve advertising.

Our use of Google Ads API data complies with Google API Services User Data Policy.

4. Meta / Facebook Ads Data

When you connect your Meta Ads account, EcomTracker accesses campaign spend data via the Meta Marketing API. This data is used only to display your ad spend within your private dashboard and is not shared or sold.

5. Data Storage & Security

• All user data is stored in Firebase Firestore with per-user access rules — no user can access another user's data
• OAuth tokens are stored server-side in our Cloudflare Worker environment and never exposed in client-side code
• All data is transmitted over HTTPS (TLS encryption)
• We use Firebase Authentication for secure login management

6. Data Retention & Deletion

You can delete your account and all associated data at any time from the app settings. Upon deletion, all your data is permanently removed from our systems within 30 days.

You can disconnect any ad platform connection (Meta, Google) at any time from the Data Import page. Disconnecting revokes our access to your ad account data.

7. Cookies

EcomTracker uses minimal browser storage (localStorage) to maintain your session and app preferences. We do not use tracking cookies or third-party analytics cookies.

8. Third-Party Services

EcomTracker uses the following third-party services:

• Firebase (Google) — Authentication and database storage
• Cloudflare Workers — Application hosting and API proxy
• Meta Marketing API — Ad spend data retrieval
• Google Ads API — Campaign data retrieval

9. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all data
• Withdraw consent for ad platform connections at any time

10. Contact Us

For any privacy-related questions or requests (including data access, correction, or deletion requests under the UK GDPR), contact us at:

SALHI LTD
128 City Road
London, EC1V 2NX
United Kingdom
Email: info@ecomtracker.co
Company Number: 16381366

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.