Privacy Policy

Last updated: 6 November 2026

StoreROI is run by Waheedullah Sediqi, trading as WS Digitals, based in Germany, who is the data controller under the GDPR. It shows online store owners and their agencies ad spend, sessions, sales and return on ad spend in one place. This page explains what we collect, how we use it and the choices you have.

What we collect

• Your account: your email address and your password, which is stored only in scrambled (hashed) form.
• Your connections: the access keys that Google, Meta and Shopify give us when you connect an account. They are stored encrypted.
• Your projects: the website, accounts and gross margin you choose, and the email addresses of anyone you invite to view a project.
• Security records: login attempts, kept for a short time to block password guessing.

What we read from connected accounts

All connections are read-only for reporting. StoreROI cannot change your ads or store.

• Google Search Console: your sites, clicks, impressions and search performance.
• Google Ads: your accounts, campaigns, spend, conversions and ad links. We only read this data, although the access Google offers for Google Ads is a single permission that is not limited to reading.
• Meta Ads: your ad accounts, campaigns, spend, results and ad links.
• Shopify: sales and session reports. We do not read individual orders or customer details.

These reports are fetched when you open a page and kept in the server's memory for about 10 minutes to make pages faster. We do not save them in our database.

How we use it

We use this information only to log you in, show your reports, keep the service secure and contact you about your account. We do not sell your information, and we do not use it for advertising or to train AI models.

Legal basis

We process your information to provide the service you signed up for (Article 6(1)(b) GDPR) and, for security records, because we have a legitimate interest in protecting accounts (Article 6(1)(f) GDPR).

Google user data

StoreROI's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to show you your own reports, and people see it only if you give them access to your project.

Who else handles it

Your information is stored with Supabase (database, in the United Kingdom) and the app runs on Google Cloud (in the United States). If you use password reset, an email service delivers that message. Because the United Kingdom and United States are outside the EU, we rely on the data protection safeguards these providers offer for such transfers. We share information with others only if the law requires it.

Cookies

We use one cookie to keep you logged in and one to remember your language. We do not use advertising or tracking cookies.

Keeping and deleting your information

We keep your information while your account is open. You can disconnect an account in StoreROI at any time, which deletes its access key, and you can also remove our access from your Google, Meta or Shopify settings. To see, correct or delete your information, email us and we will reply within 30 days.

Your rights

You have the right to see, correct, delete or export your information, to limit or object to how we use it, and to withdraw any permission you gave. You can also complain to a data protection authority.

Changes and contact

If this policy changes, we will update this page and its date. Questions: contact@wsdigitals.com