Data Deletion

Etovi Pty Ltd (ACN 697 881 940, ABN 56 697 881 940, trading as "Etovi") provides this page to describe how you can request deletion of personal data we hold about you. It complements our Privacy Policy, which sets out the broader framework governing how we collect, use, and protect personal data.

Personal data may reach Etovi via three different relationships. The route to request deletion depends on which applies to you:

• If you are an Etovi merchant (you signed up directly for an Etovi workspace and connected your Shopify store, ad accounts, etc.), see Section A below.
• If you are a customer of an Etovi merchant (you bought something from a Shopify store that uses Etovi for analytics), see Section B.
• If you connected your account via Meta or Google (e.g. you authorised Etovi to access your Meta Ads or Google Ads account), see Section C.

If you are an Etovi merchant, you can:

• Email request: send a deletion request from the email address registered on your Etovi account to privacy@etovi.ai with the subject line "Data Deletion Request". Include your workspace name and the Shopify shop domain (if any) you want deleted.
• Uninstall + Shopify redact: if you uninstall the Etovi Shopify app, Shopify automatically fires a shop/redact webhook approximately 48 hours later. On receipt we delete merchant-owned data for that shop within 30 days, except information we are legally required to retain. Ordinary retention periods do not override this deadline.

On receipt of a valid deletion request, we will delete or irreversibly anonymise within 30 days:

• Your workspace and account profile within the verified request scope
• OAuth tokens for connected platforms (already encrypted at rest)
• Order, customer, product, inventory, and ad-performance data ingested for your workspace
• Personal data in AI agent memory, generated assets, and audit records within the verified request scope, subject to the limited legal-retention exceptions below

We verify which stores, workspaces and shared records your request covers so that another authorised user's data is preserved. Recovery history and separate database copies require their own deletion or expiry checks; a workspace deletion alone does not confirm that every copy has been erased. Our Privacy Policy describes the current recovery arrangements.

If you are a customer of a Shopify store that uses Etovi, the most direct route is via the merchant. Most merchants can use Shopify's built-in customer data tools, which automatically notify Etovi:

• customers/data_request webhook — when a merchant or you, via the merchant, requests an export, Shopify fires this webhook to Etovi. We respond within the window required by applicable law and Shopify's policy.
• customers/redact webhook — Shopify fires this webhook according to its customer privacy process. We process the customer-linked data we hold, including protected contact fields and matching event copies. Shopify determines delivery timing based on order history; we complete the request within 30 days of receipt, subject to legal retention obligations.

You can also email privacy@etovi.ai directly. Include the merchant store's domain (e.g. example.myshopify.com) and the email address you used when buying from that store. We will route the request to the appropriate merchant and confirm completion.

If you connected a Meta Ads or Google Ads account to Etovi, you can end Etovi's access and have the data it holds deleted in any of the ways below.

Meta Ads

• Disconnect in Etovi. In Settings → Connections, choose Disconnect on the Meta account. Syncing stops, the access token is removed, and Etovi's access is revoked on Facebook unless another connected account still uses the same Facebook login. Tick "Also delete all historical data" to delete the synced data at the same time. Otherwise it is kept for 90 days so you can reconnect, then deleted automatically, and we email the workspace owner at least 14 days before. "Delete data" on the disconnected account removes it sooner.
• Remove Etovi on Facebook. On Facebook, open Settings & privacy → Settings → Apps and websites (or Business integrations, if you connected through a business account) and remove Etovi. Facebook tells us automatically. We stop all syncing and every call to Meta for the ad accounts connected with your Facebook login. The data already synced stays in your workspace for 30 days, so reconnecting within that time picks up where you left off. After that we delete it automatically, and we email the workspace owner at least 14 days before. "Delete data" on the disconnected account in Settings → Connections removes it sooner.
• Send a data deletion request through Facebook. After removing Etovi, you can send a data deletion request from the same Facebook settings. Facebook passes it to us automatically and gives you a confirmation code and a link to our status page (etovi.ai/data-deletion/status/<code>), which shows when the deletion is complete. For every ad account connected with your Facebook login, in any Etovi workspace, we stop all calls to Meta and delete:
  • The connection, its access token and the permissions you granted
  • Campaigns, ad sets and ads, including each ad's text, headlines, descriptions, links, thumbnail links and image fingerprints, and Meta's review feedback
  • Daily performance metrics and reporting records
  • The history of changes made through Etovi, including tracking-tag changes
  • The record of images and videos uploaded for new ads
  • Recommendations and agent notes Etovi prepared from those campaigns, ad sets and ads
  Orders from a connected Shopify store are kept but no longer linked to those Meta campaigns. Our security audit log keeps only that each change happened, when, and which team member made it, with every Meta detail removed. Team chat messages and AI summaries that mention your ads by name are kept; email us to have those deleted too. It deletes the data Etovi holds and changes nothing in your Meta ad account.

Google Ads

• Revoke the grant on Google. Open myaccount.google.com → Security → Third-party apps with account access and remove Etovi. Once revoked, Etovi can no longer call Google on your behalf, and the stored token becomes useless. To delete the synced data, disconnect the account in Settings → Connections with "Also delete all historical data" ticked, or email us.

Either platform, by email

• Email us at privacy@etovi.ai from the email address associated with the connection. State which integration you want deleted (Meta, Google, or both) and the workspace it was linked to. We will:
  • Disconnect the integration and remove its stored credentials
  • Delete the data synced from it and, if you ask, the related audit entries and recommendations, subject to the limited retention described below
  • Confirm the outcome within 30 days

We complete valid deletion requests within 30 days of receipt. We may need to verify your identity and the scope of your request. We will explain any specific legal obligation that requires limited information to be retained.

We confirm the outcome through a verified contact channel, including any legally required retention. Acknowledging a Shopify webhook confirms receipt, not completion of deletion. A deletion request made through Facebook is confirmed on its status page, which says "Deleted" only once the deletion has finished. Contact us if you need confirmation of the request's status.

We retain personal data after a valid deletion request only where a specific legal obligation requires it, limited to that obligation. This can include legally required tax or accounting records. We restrict access and record the reason and applicable disposal requirement; there is no blanket exemption for audit logs or agreement records.

Data that has been irreversibly anonymised so that individuals cannot be identified is no longer personal data. Aggregating data or removing a name alone does not establish anonymity.

• Legal entity: Etovi Pty Ltd
• Australian Company Number (ACN): 697 881 940
• Australian Business Number (ABN): 56 697 881 940
• Privacy enquiries: privacy@etovi.ai

If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au), or with your local data protection authority if you are in the EEA, UK, or another jurisdiction.