Privacy Policy

Last updated 14 October 2026

Dollars is an advertising workspace for online stores. It is operated by [Legal entity name pending] (“we”, “us”). This policy explains what data the Dollars application at app.trydollars.com handles, why, who processes it for us and how to have it deleted. It covers merchants who use Dollars, people they invite, and shoppers who visit a store that has installed the Dollars tracking pixel.

1. Roles

For merchant account data we decide how it is used. For data about a merchant’s shoppers, orders and ad accounts, we process it on the merchant’s behalf to provide the service; the merchant is responsible for its own storefront privacy notice and any consent its visitors must give before the pixel loads.

2. Data we handle

Account and workspace

• Your email address and password for sign-in. Authentication is provided by Supabase; passwords are stored by Supabase Auth, not in our application tables.
• Workspace content you enter or generate: store name and URL, products, costs, brand details, campaigns, creative drafts, audience notes and settings.
• Team invitations: the invitee’s email address and role, and an invitation token stored only as a hash. Invitations expire after seven days.
• Images and videos you upload or generate, kept in private storage buckets scoped to your workspace.
• If you join the waitlist: your email address, the sign-up source and referring page.

Shopify

When you connect a Shopify store, Dollars requests read-only access to products, inventory and orders (read_products, read_inventory, read_orders). It never edits your Shopify store.

• Products and variants you choose to import, including price, inventory cost and product images downloaded from Shopify’s CDN.
• Orders from roughly the last 60 days, normalized to order identifiers, dates, amounts (sales, shipping, tax, refunds), currency and status. Customer names, addresses and email addresses from orders are not stored.
• The Shopify access token, encrypted with AES-256-GCM before it is stored and never sent to your browser.

Meta (Facebook and Instagram) and Pinterest

• Access tokens you grant through Meta or Pinterest sign-in, stored encrypted and used only by our servers.
• Account details needed to operate the integration: the names and IDs of your Facebook Pages, linked Instagram accounts, business and ad accounts, and the permissions you granted.
• Ad reporting data such as daily spend, impressions, clicks and conversions for your ad accounts, and records of campaigns you launch through Dollars.
• Comments on your ads and Pages are read from Meta when you open Comments so you can reply, hide or review them. Dollars does not keep a copy of comment text in its database.

To connect Meta, Dollars can open a temporary hosted browser (provided by Browserbase) in which you sign in to Meta yourself. Your password, two-factor codes and consent are entered directly with Meta; Dollars does not capture them. Browserbase keeps the browser session state (such as cookies) so the same environment can be reused when you reconnect. Provider session recording and logs are disabled. Before sign-in, the hosted browser’s own network address is checked against your chosen location, which may use IPinfo; this concerns the hosted browser, not your device.

Store visitors (tracking pixel)

Merchants can add the Dollars pixel to their storefront. When it runs it:

• Stores a random visitor ID and session details in the visitor’s browser localStorage. The Dollars campaign a visitor arrived from is kept in sessionStorage for that browser tab or, if the store sets an attribution window, in localStorage for up to 30 days. No cookies are set by the pixel.
• Sends events such as page views, product views, add to cart, checkout start and review interactions, with the page path, product ID, UTM parameters, the type of ad click ID present (for example that an fbclid existed, not its value) and the referring website’s host name.
• When automatic mode is on, adds the visitor and session IDs to the Shopify cart as attributes so a later order can be matched to the visit.

Purchases, refunds and cancellations are recorded only from server-side sources (Shopify order import or the merchant’s authenticated API), never from the browser. Visitor IP addresses are not stored with events; a keyed hash of the IP is used briefly for rate limiting. Merchants may send their own server events, which can include a country and city, and may submit hashed person keys for audience analysis, which we hash again before storing.

Product analytics in the Dollars app

If enabled by the operator, Dollars uses PostHog to understand how the app itself is used. It is configured without person profiles and without IP capture, with no autocapture, and records a small set of named events (such as sign-up submitted or video saved) and page views reduced to a fixed list of page names. Masked session replays may be recorded on some workspace pages; all text and inputs are masked and images, video and integration screens are blocked. Sign-in, onboarding, settings, and these legal pages are never replayed. PostHog stores its identifier in your browser’s localStorage.

3. How we use data

• To run your workspace, integrations and reports.
• To attribute sales to campaigns and calculate our fee (see the Terms).
• To generate ad copy, images and narration when you ask for them.
• To secure the service, prevent abuse and enforce rate limits.
• To send account and team invitation emails.

We do not sell personal data and do not use merchant or shopper data to train models.

4. Service providers

• Supabase: database, authentication and private file storage.
• Vercel: application hosting.
• OpenAI: ad copy and narration text (product, brand and brief details you provide) and, where configured, image editing of your product image. Text requests are sent with storage disabled.
• KIE: image generation from your product image and prompt, delivered through a short-lived link to the private original.
• Resend: team invitation emails (the invitee’s address and invitation link).
• Browserbase: the temporary hosted browser for Meta sign-in described above. IPinfo may classify that browser’s network address.
• PostHog: product analytics as described above.
• Shopify, Meta and Pinterest: receive the requests needed to read your data and, when you choose, to create or manage campaigns, pins, ads and comment replies on your accounts.

5. Retention and deletion

• Disconnecting Shopify, Meta or Pinterest in Settings & Billing deletes the stored access tokens immediately. Previously imported products, orders and reports remain in your workspace until you request deletion.
• Uninstalling the Dollars Shopify app clears its token. Shopify’s privacy requests are honoured automatically: a customer redaction deletes that shopper’s browsing events and removes storefront identifiers from their orders and purchase events; a shop redaction deletes the shop’s orders, sync state and credentials.
• Deleting your account removes your workspace and the data linked to it. Issued invoices are kept as financial records; they contain amounts, not shopper details.
• Other data has no fixed expiry and is kept while your account is active.

See Data deletion for how to make a request.

6. Security

Provider credentials are encrypted at rest, database access is limited per workspace with row-level security, files are private, and service keys are used only on the server. No system is perfectly secure; tell us promptly if you suspect a problem.

7. Your choices and rights

You can access, correct, export or delete your data, or object to processing, by contacting us. Depending on where you live you may have additional rights, including complaining to a data protection authority. Shoppers should contact the store they purchased from; we will help that store respond.

8. International transfers

Our providers may process data in the United States and other countries. Where required we rely on appropriate transfer safeguards.

9. Changes and contact

We will post changes here and update the date above. Questions: [contact email pending]. This policy is governed by the laws of [governing law pending].