Privacy policy

Settl provides a hosted checkout and server-side tracking for Shopify and WooCommerce stores. Merchants (our customers) use Settl for their own shops.

For anything about your data, write to us via the contact page.

We keep your name, e-mail address and the details of your stores so you can log in and use Settl. Subscription payments are handled by Whop; we receive the status of your subscription, not your card details.

API keys and tokens you connect (payment providers, ad platforms, Shopify) are stored encrypted and only used to do what you set up.

When you buy from a store that uses Settl, we process the details needed for your order (such as name, e-mail, address, the products and the payment status) on behalf of that store. The store is responsible for this data; we act as its processor.

If the store uses Settl tracking and you accept marketing cookies, we remember which ad you came from (click IDs, for up to 90 days) and send the purchase to the ad platforms the store uses (Meta, TikTok, Google, Snapchat, Pinterest). E-mail addresses and phone numbers are hashed (SHA-256) before they are sent.

For the store's live view we keep a rough location (city level, derived from the IP address) of visitors for at most one day, and of sales for at most three days.

Merchants can connect Facebook to see ad results in Settl. We then only read results of the ad accounts they choose (the ads_read permission): spend, impressions, clicks and the purchases Meta reports. We never change ads, never spend money and never post anything.

The access token is stored encrypted and used only to show these results to the merchant. It is deleted when the merchant disconnects Facebook in Settl, or when Settl is removed in Facebook's settings (we then receive a deletion request and remove the connection).

What we access. Merchants can connect their Google Ads account to see ad results in Settl. Settl requests one scope: the Google Ads API scope (https://www.googleapis.com/auth/adwords). With it we read the ad accounts the merchant picks: account name, ID and currency, campaign, ad group and ad names and status, daily budgets, and performance numbers (spend, impressions, clicks, conversions and conversion value). We do not access e-mail, contacts, Drive, Gmail or any other Google data.

How we use it. Only to show the merchant their own Google Ads results in their Settl dashboard, next to the sales Settl tracked for their store, so they can see their real return on ad spend per campaign and per ad. If the merchant also switches on "Google Ads direct" and picks a conversion action, Settl uploads the store's paid orders to that conversion action (Google click id, order id, value, currency and a SHA-256 hash of the buyer's e-mail and phone), so Google Ads can count the sales its ads brought in. Apart from that we never create, change or pause campaigns and never spend money.

Sharing. We do not share, sell or transfer Google user data to anyone. Each merchant only sees their own accounts. The data only passes through the infrastructure that runs Settl (Vercel for hosting, Supabase for the database), which process it on our behalf and cannot use it for anything else. We do not use it for advertising, and we do not use it to develop, improve or train AI or machine-learning models.

Protection. All traffic uses HTTPS (TLS). The Google refresh token is encrypted (AES-256-GCM) before it is stored, the encryption key is kept separately from the database, and only Settl's server can read it. Access to our systems is limited to the Settl team.

Retention and deletion. Google Ads report numbers are fetched when the merchant opens the dashboard and are cached for at most 10 minutes; we do not keep a permanent copy. The encrypted refresh token and the list of chosen accounts are kept only while Google is connected. They are deleted right away when the merchant clicks Disconnect in Settl, and access stops when Settl is removed in their Google account (myaccount.google.com/permissions). When a merchant deletes their store or account, all related Google data is deleted. Merchants can also ask us to delete it via the contact page; we do this within 30 days.

Settl's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Merchants can connect their TikTok Ads, Snapchat Ads or Pinterest Ads account to see ad results in Settl. With their permission we only read the ad accounts they choose: account name, ID, currency and time zone, campaign, ad group and ad names, status and budgets, and performance numbers (spend, impressions, clicks or swipes, purchases or checkouts and purchase value). We use this only to show the merchant their own results next to the sales Settl tracked. Access is read-only: we never create or change campaigns and never spend money.

We do not share or sell this data and do not use it for advertising or to train AI models. Tokens are encrypted (AES-256-GCM) before they are stored. Report numbers are fetched when the merchant opens the dashboard and cached for at most 10 minutes. Tokens are deleted right away when the merchant clicks Disconnect in Settl, or deletes the store or account.

On settlcheckout.com we use the Meta pixel to measure our own ads, only after you click Accept in the cookie banner. It then sees which pages you visit, whether you create an account, start a payment or pay for a plan, and we send these events (with your e-mail address hashed) to Meta. This is separate from our customers' stores: it never runs on checkout pages or shops. Click Only necessary and nothing is loaded or sent.

We also count visits to settlcheckout.com ourselves, without cookies: which pages are viewed, where visitors came from (referrer or utm tag), and a rough location from the IP address. A visitor is a daily-changing code made from the IP address and browser, so we can't follow anyone across days. When you're logged in, we link the visit to your account. We keep this for at most 90 days.

Account data: as long as you have an account. Click data for tracking: 90 days. Live-view locations: 1 to 3 days. Order and tracking records: as long as the merchant uses Settl, so they can see their history.

Only with the services needed to run Settl: hosting (Vercel), database (Supabase), e-mail (Resend), maps (Mapbox, for the live view), and the payment providers and ad platforms the merchant connects. We don't sell data.

You can ask to see, correct or delete your data. Shoppers can best contact the store they bought from; we help the store with the request. Merchants can contact us directly.