Privacy Policy

Last updated: March 9, 2026

1. Introduction

ThankYou.Ad ("we", "us", or "our") is operated by M0 Media Group. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Shopify application and related services (the "Service").

By installing or using ThankYou.Ad, you agree to the collection and use of information as described in this policy. If you do not agree, please uninstall the app and discontinue use.

2. Information We Collect

2.1 Merchant Information

When you install ThankYou.Ad on your Shopify store, we collect and store the following information:

  • Store domain — your myshopify.com domain
  • Store name — your public-facing store name
  • Store category — the category you select during setup (e.g., Fashion, Beauty, Health)
  • Shopify access token — used to authenticate API requests on your behalf (stored securely)
  • Payout email — the email address you provide for receiving earnings

2.2 Ad Event Data

When ads are displayed on your order confirmation page, we collect:

  • Impressions — when an ad is viewed
  • Clicks — when a customer clicks on an ad
  • Conversions — when a click leads to a qualifying action on the advertiser's site
  • Anonymized session IDs — randomly generated identifiers to group events within a single page view (not linked to any personal identity)
  • Country — derived from the request, used for ad targeting
  • Device type — mobile or desktop, used for analytics

2.3 Information We Do NOT Collect

ThankYou.Ad does not collect, store, or process:

  • Customer names, email addresses, or contact information
  • Payment details or credit card numbers
  • Order contents or product information
  • Personal browsing history or data outside the order confirmation page
  • Cookies on the customer's browser

3. How We Use Your Information

We use the information we collect to:

  • Display relevant, category-targeted ads on your order confirmation page
  • Optimize ad selection using our Thompson Sampling algorithm to maximize revenue per visitor
  • Calculate and distribute publisher revenue shares
  • Provide analytics and reporting through your publisher dashboard
  • Track advertiser campaign performance (impressions, clicks, conversions)
  • Improve the Service and develop new features

4. Data Sharing

We share information only in the following circumstances:

  • Advertisers — receive aggregated, anonymized performance data (impressions, clicks, conversions) for their campaigns. Advertisers never receive your store's customer data.
  • Service providers — we use trusted third-party services for hosting (Fly.io), database management (PostgreSQL), and payment processing. These providers are contractually obligated to protect your data.
  • Legal requirements — we may disclose information if required by law, regulation, or legal process.

We do not sell, rent, or trade your personal information to third parties.

5. Data Retention

We retain your data as follows:

  • Merchant account data — retained while your app is installed. Upon uninstallation, we mark your account as inactive and retain data for 90 days for payout processing, then delete it.
  • Ad event data — retained for 24 months for analytics and reporting purposes, then automatically purged.
  • Aggregated statistics — de-identified, aggregated data may be retained indefinitely for service improvement.

6. Data Security

We implement appropriate technical and organizational security measures to protect your data, including:

  • Encrypted data transmission (TLS/SSL)
  • Encrypted database connections
  • Access controls limiting data access to authorized personnel only
  • Regular security reviews and updates

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

7.1 GDPR (European Economic Area)

If you are located in the EEA, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact us at privacy@thankyou.ad.

7.2 CCPA (California)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@thankyou.ad.

7.3 Data Deletion

You can request complete deletion of your data at any time by emailing privacy@thankyou.ad or by uninstalling the app from your Shopify store. We will process deletion requests within 30 days.

8. Shopify Data Protection

As a Shopify app, we comply with Shopify's API Terms of Service and Partner Program Agreement. We handle the following mandatory Shopify webhooks:

  • Customer data request — we respond to requests for customer data stored by our app
  • Customer data erasure — we delete any customer data upon request
  • Shop data erasure — we delete all merchant data when requested by Shopify

9. Children's Privacy

ThankYou.Ad is a business-to-business service intended for Shopify store owners. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will promptly delete the information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: