Privacy Policy

1. Who we are

CommerceLift is a product data and feed management platform operated by Venture Stream Ltd, 63 Westgate Road, Newcastle upon Tyne, NE1 1SG, United Kingdom ("we", "us"). We are the data controller for personal data described in this policy. Contact: hello@commercelift.uk.

2. What we collect

We collect and process:

• Account data — name, email address, role and login credentials (via Google Sign-In) for each user on your account.
• Product catalogue data — the product information you import from Shopify or upload via file (titles, descriptions, prices, images, variants, inventory), processed solely to generate your channel feeds.
• Usage data — actions taken in the app (rule changes, syncs, overrides), retained as audit logs for your account.
• Billing data — subscription and payment details, handled by our payment providers (Stripe, or Shopify Billing for App Store installs). We do not store card numbers.

Shopify stores: our integration is strictly limited to product and inventory data. We do not access or store your store's customer data, order information, or any personal data of your customers.

3. How we use your data

We use your data to provide and operate the service: generating and syncing feeds, running AI enrichment on your catalogue, providing support, sending service communications, and improving the platform. We do not sell personal data, and we do not use your catalogue data to train AI models for other customers.

4. Legal bases

Under UK GDPR we rely on: performance of a contract (operating your account and feeds), legitimate interests (service improvement, security, fraud prevention), and consent where required (e.g. marketing emails and analytics cookies, which you can withdraw at any time).

5. Sharing & sub-processors

Your data is shared only with the services needed to run the platform: cloud hosting providers (Firebase/Google Cloud), payment processors (Stripe), email delivery (Mailgun), AI providers used for attribute enrichment, and the channels you explicitly connect (e.g. Google, Meta). Each sub-processor is bound by a data processing agreement. Feed outputs you publish to channels are governed by those channels' own policies.

6. Retention

Account and catalogue data is retained while your account is active. If you cancel, we delete your catalogue data within 90 days of account closure; audit logs and billing records are kept as required by law.

7. Your rights

You have the right to access, correct, export or erase your personal data, restrict or object to processing, withdraw consent, and lodge a complaint with the ICO. Email hello@commercelift.uk to exercise any of these rights.

8. Cookies

The app uses essential cookies for authentication and session management. The marketing site uses analytics cookies (Google Analytics 4) only with your consent.

In line with Google Consent Mode v2, analytics storage is denied by default: on your first visit a consent banner asks you to Accept or Decline. Analytics cookies are set only after you click Accept. If you Decline, no analytics cookies are stored and measurement runs in a cookieless, non-identifying mode. We do not use advertising or personalisation cookies.

Your choice is remembered for 12 months in a first-party cookie (cl_consent). To withdraw or change your consent, clear your browser cookies for this site (which re-displays the banner) or block cookies through your browser settings. For more about cookies and how to disable them, visit allaboutcookies.org.

9. Changes

We'll notify account owners by email of material changes to this policy before they take effect.