Privacy policy

Stetto LLC, a California limited liability company (“Stetto”, “we”, “us”), makes a canvas where ecommerce teams see their store, ad, email and analytics data in one place, with an AI copilot that builds charts from it. This policy explains what we collect, why, who helps us process it, and the choices you have. It covers the Stetto app at app.getstetto.com and our website at getstetto.com.

The short version

• We collect what we need to run Stetto for you: your account details, what you build in Stetto, and the data from the platforms you choose to connect.
• Stetto only reads from the platforms you connect. We never change anything in your store, ad accounts or email platform.
• We don't sell your data, and we don't use it to advertise to you or anyone else.
• Your workspace's data is only visible to the people you give access to.
• You can disconnect a platform, leave a team, or delete a workspace or your account at any time, and the data goes with it.

What we collect

Account information. Your name and email address, and if you sign in with Google, your name and profile picture as Google shares them. If you set a password, our sign-in provider keeps only a one-way hash of it, never the password itself; if you turn on two-factor authentication, it keeps the secret your authenticator app uses. We use these to sign you in, show who's on a team, and send you confirmation codes, password resets and invites.

What you create. Your workspaces, decks, cards, frames, settings such as product costs, team membership and invites, and your conversations with the copilot.

Data from platforms you connect. When someone in your workspace connects a platform such as Shopify, Meta, Google Ads, Google Analytics or Klaviyo, we read reporting data from it: for example orders, sales, refunds and products from your store; spend, impressions, clicks and conversions from ad accounts; sends, opens, clicks and attributed revenue from email platforms; and sessions and conversions from analytics. We store daily summaries of this data in your workspace so your charts load quickly, and a copy of each ad's creative (its picture, headline and text) so your cards can show it. From orders we keep the order number, date, products, amounts, ship-to country, sales channel and whether it was a first order, never who placed it: no customer names, emails, addresses or phone numbers. Stetto only reads from these platforms and never changes anything in them.

Usage and technical data. Basic logs needed to run and secure the service, such as when you sign in, errors, the number of copilot questions a workspace asks and their cost, and your IP address in server logs.

Cookies. We use only essential cookies: one to keep you signed in, and one to remember which workspace you have open. We don't use advertising or tracking cookies.

How we use it

• To provide Stetto: show your data on your decks, sync teammates' changes, and answer your copilot questions.
• To keep it secure and working: preventing abuse, setting usage limits, fixing bugs and supporting you.
• To communicate with you about your account, such as confirmation codes, password resets, invites and important service changes.

We don't sell your personal information or your workspace's data, and we don't use it for advertising.

The AI copilot

When you ask the copilot a question, we send your question, the recent conversation, a description of the deck you're looking at, and the results of the queries it runs on your data to Anthropic, which provides the AI model. Anthropic processes this to answer your question under its commercial terms, which don't allow it to train its models on this data. The copilot can only read your data through Stetto's own metric definitions; it can't change data in your connected platforms.

Who helps us run Stetto

We use these service providers, who process data on our behalf and only to provide their service to us:

• Supabase: database, sign-in and live sync (hosted in the United States).
• Vercel: hosting for the app.
• Anthropic: the AI model behind the copilot.
• Nango: securely connecting to the platforms you link, and storing the access they grant.
• Resend: sending sign-in and invite emails.
• Sentry: error reports, so we hear when something in Stetto breaks: what failed and where, without your figures or personal details.

We may also share information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply to your data.

Google user data

If you sign in with Google or connect a Google service such as Google Ads or Google Analytics, Stetto's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features you see in Stetto, we don't transfer it except as needed to provide those features, for security, or as required by law, we don't use it for advertising, and people don't read it unless you ask us to, it's needed for security, or the law requires it.

Who can see your workspace

A workspace's decks and data are visible only to the people its team admins give access to, and to team admins. Access is enforced in the database itself, not just in the app. Our team doesn't look at your workspace's data unless you ask us to help, it's needed to investigate a security or abuse problem, or the law requires it.

Keeping and deleting data

We keep your data while your account or workspace is active, and you can delete it yourself at any time, straight away:

• Disconnect a platform (Connections, in a workspace): we stop syncing it, remove the access it granted, and delete the data it imported. Unticking an ad account does the same for that account.
• Delete a workspace (team admins, in Settings: the workspace's General page, or the team's Workspaces): its decks, imported data, connections and creative copies are deleted.
• Delete your account (the account menu, top right): teams only you are on are deleted with everything in them; on teams you share, you leave and the team keeps its work. Your sign-in is deleted too.
• Uninstall Stetto from your Shopify store: when Shopify tells us, 48 hours after you uninstall, we delete that store's data from every workspace it was connected to.

You can also ask us to delete your data, including data from Meta or Google, by emailing hello@getstetto.com. We'll confirm and delete it within 30 days, except where we must keep something for legal reasons. Backups roll over and are cleared on their normal schedule.

Security

Data is encrypted in transit and at rest by our hosting providers. Access to each workspace is limited by row-level security in the database, and platform access tokens are held by Nango, not in our app database. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.

Your rights

Depending on where you live, including the EU, the UK and California, you may have the right to access, correct, delete or export your personal information, and to object to or limit some processing. To make a request, email hello@getstetto.com. We won't treat you differently for using these rights. If you're in the EU or UK, you can also complain to your local data protection authority. Data may be processed in the United States, where our providers are based.

Children

Stetto is a business tool and isn't meant for anyone under 16. We don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above, and for significant changes we'll tell you by email or in the app before they take effect.