Privacy Policy

This policy applies to the Persuadly website, application and related account, support and marketing communications. It should be read alongside the privacy information provided by Shopify, your connected email provider and the merchant whose communications you receive.

1. Who we are

For Persuadly account, website, security, billing and direct marketing information, Feathersmith Limited is the controller. When a merchant uses Persuadly to prepare a campaign using information held for that merchant, the merchant is generally the controller and Persuadly acts as its processor.

2. Information we use

• Account information: name, business email address, password-management status, company name, settings and marketing choices.
• Shopify information: store domain, app installation and subscription status, and the product catalogue data made available through the approved read_products scope, including product names, descriptions, prices, URLs and images.
• Email-provider information: connection status, authorized capabilities and campaign drafts sent to the provider at your instruction.
• Brand and campaign information: storefront evidence, Brand Voice answers, campaign briefs, generated drafts, selected products and generation results.
• Technical and support information: IP address and device/browser information contained in security logs, timestamps, diagnostic codes, support correspondence and audit events.
• Billing information: Shopify plan handle, subscription status and billing-cycle metadata. Shopify processes payment-card and merchant billing details; Persuadly does not receive full card details.

Persuadly requests product access only. It does not request Shopify customer, order or payment-card data. Please do not place special-category information, passwords or confidential customer lists in campaign briefs or support messages.

3. Purposes and lawful bases

• Contract: creating and administering your account, connecting services, synchronizing products, generating campaigns, applying plan limits and providing support.
• Legitimate interests: securing and improving the service, preventing misuse, diagnosing failures, measuring service performance and communicating essential product or account information. We balance these interests against the rights of affected people.
• Legal obligation: meeting tax, accounting, fraud-prevention, regulatory and data-protection duties.
• Consent: sending optional Persuadly tips, product news and offers where you have opted in. You can withdraw consent at any time without affecting account access.

4. Who receives information

We use carefully selected providers to operate Persuadly, including Amazon Web Services for hosting, authentication, databases, monitoring and transactional email; Anthropic for campaign analysis and generation; Shopify for store authorization and app billing; and the email platform you choose when you direct Persuadly to create a draft. The selected email platform receives the campaign content, sender details and audience identifier needed to create that draft. Persuadly does not instruct the platform to send or schedule it. Professional advisers and authorities may receive information where reasonably necessary or legally required.

We do not sell personal information. We do not use a merchant’s connected catalogue or campaign content to train general-purpose models.

5. International transfers

Persuadly’s primary AWS environment is in the United Kingdom. Some providers may process information in other countries. Where UK personal information is transferred internationally, we use an applicable adequacy regulation or contractual and organizational safeguards appropriate to the transfer. Contact us for further information about the safeguards relevant to your data.

6. Security

We use tenant isolation, encryption in transit and at rest, managed authentication, restricted administrative access, encrypted provider credentials, logging, monitoring and backups. No online service can promise absolute security. Notify privacy@persuadly.com promptly if you believe an account or connection has been compromised.

7. Retention

• Account, brand, catalogue and campaign information is normally retained while the account is active.
• Connection credentials are removed or made unusable when the relevant integration is disconnected or the Shopify app is uninstalled.
• Following a verified account-deletion request, information not required for legal or security reasons is removed from active systems normally within 30 days; residual backup copies expire through the backup cycle.
• Application logs are generally retained for short operational periods; current core Lambda logs are retained for 14 days.
• Consent and suppression records may be kept to respect marketing choices. Financial, contractual and audit records may be retained for up to six years where required or reasonably necessary.

8. Your rights

Depending on the circumstances, UK data-protection law gives you rights to access, correct, erase, restrict or object to processing, and to receive certain information in a portable form. Where processing is based on consent, you may withdraw it at any time. Rights are not absolute and we may need to verify your identity.

Send requests to privacy@persuadly.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

9. Automated processing

Persuadly uses AI to suggest Brand Voice information and generate campaign drafts. This disclosure explains how merchant information is processed. The outputs are recommendations for a merchant to review and are not decisions that produce legal or similarly significant effects about individuals. Merchants remain responsible for reviewing factual accuracy, suitability and compliance before sending a campaign.

10. Contact and changes

Questions should be sent to privacy@persuadly.com. We may update this policy as Persuadly or the law changes. Material changes will be communicated where appropriate.

Last updated: 20 August 2026