StoreCensus Privacy Policy

1. Introduction

Welcome to StoreCensus ("we," "us," or "our"). StoreCensus is operated by Dark Ecommerce Labs, LLC doing business as StoreCensus.

StoreCensus provides access to publicly available Shopify store data, including but not limited to store names, URLs, categories, public emails, and related business information ("Lead Data"). By using StoreCensus, you ("User," "you," or "your") agree to this Privacy Policy and our Terms of Service.

This policy covers two kinds of information: information about you as a StoreCensus account holder ("Account Data"), and the business information about online stores that StoreCensus provides ("Lead Data").

2. Information We Collect

2.1 Information you give us when you use StoreCensus

• Account information: your name, email address and password (stored only as a secure hash). If you sign in with Google or GitHub, we receive your name, email address and profile picture from that provider.
• Billing information: your plan, invoices and payment history. Payments are processed by Stripe. We do not receive or store your full card number.
• Content you create: saved searches and filters, lists, unlocked leads, exports, automations, API keys and messages you send to our support team.
• Connected integrations: if you choose to connect a third-party service (for example Gmail, Google Sheets, a CRM or an email-outreach tool), we store the access tokens and settings needed to run that integration. See Section 3 for Google data.

2.2 Information collected automatically

• Usage data: pages you visit, features you use, searches you run, credits you spend and the date and time of these actions.
• Device and log data: IP address, browser type, operating system and referring page.
• Cookies: we use cookies to keep you signed in, remember your preferences and measure site usage (including Google Analytics). See our Cookie Policy.

2.3 Lead Data we provide

• Publicly available business information (e.g., store name, website URL, email addresses published on websites)
• Public social profiles and metadata associated with Shopify stores
• Derived analytics and insights based on publicly available store behavior

We do not knowingly collect or sell non-public personal information.

3. Google User Data

StoreCensus uses Google APIs only for features you choose to use. We request access only when you start that feature, and Google shows you exactly what access is being requested before you approve it.

• Sign in with Google (scopes: openid, email, profile): we receive your name, email address and profile picture. We use them only to create and sign in to your StoreCensus account and to contact you about your account.
• Gmail for automations (scope: gmail.send): if you connect your Gmail account to an automation, StoreCensus sends the emails that you have written and set up in that automation, from your Gmail account, to the recipients your automation selects. We cannot read, search, modify or delete any email in your mailbox. We store your Gmail address and connection tokens so the automation can run.
• Google Sheets export (scopes: spreadsheets, drive.readonly): if you connect Google Sheets, we list the names of your spreadsheets so you can choose where to send leads, and we write the leads you export into the spreadsheet you choose. We do not read or download the contents of your other Drive files.

How we store and protect Google data. Google access and refresh tokens are kept in our access-restricted production database (Gmail tokens are additionally encrypted) and are used only by our servers to perform the action you requested. They are never shown to other users or included in exports.

How we share Google data. We do not sell Google user data. We do not share it with anyone except as needed to provide the feature you requested, to comply with the law, or as part of a merger or acquisition with notice to you. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalized AI or machine-learning models.

Retention and deletion. We keep Google tokens only while the integration is connected. You can disconnect Gmail or Google Sheets at any time in your StoreCensus account, or revoke access at myaccount.google.com/permissions. Disconnecting in StoreCensus deletes the stored tokens immediately. To have all Google data associated with your account deleted, including when you close your account, email support@storecensus.com and we will delete it within 30 days.

StoreCensus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Information

We use Account Data to:

• Create and manage your account, process payments and provide the features you use
• Send service emails (receipts, security notices, alerts you set up) and, if you have not opted out, product updates and marketing emails
• Provide customer support and respond to your requests
• Keep StoreCensus secure, prevent fraud and abuse, and enforce our Terms of Service
• Understand how StoreCensus is used so we can improve it

We use Lead Data to:

• Deliver lead generation and prospecting tools to users
• Improve the functionality and offerings of StoreCensus
• Analyze aggregate market trends and behavior patterns

You can unsubscribe from marketing emails at any time using the link in any marketing email.

5. Service Providers and Sharing

We do not sell your Account Data. We share it only with service providers that help us run StoreCensus, under agreements that limit their use of it to providing their service to us:

• Stripe: payment processing
• Amazon Web Services: hosting, databases and transactional email
• MailerLite: product update and marketing emails
• Google Analytics: website usage measurement
• OpenAI: processes the text you type into AI-assisted features (such as describing a search in plain language). Google user data is never sent to it.

We may also disclose information if required by law, to protect our rights or users, or as part of a merger, acquisition or sale of assets.

6. Security

We use HTTPS for all traffic, store passwords as secure hashes, keep third-party access tokens out of anything shown or exported to users, and restrict access to production systems. No method of transmission or storage is completely secure, but we work to protect your information.

7. Data Sourcing and Accuracy

• Lead Data provided by StoreCensus is gathered from publicly accessible sources and reputable third-party aggregators.
• While we strive for accuracy, we do not guarantee the completeness, correctness, or ongoing availability of any data.
• Lead Data may become outdated or inaccurate over time without notice.

8. User Responsibility for Data Use

By purchasing or accessing Lead Data through StoreCensus, you agree that:

• You are solely responsible for how you use the data.
• You must comply with all applicable laws, including but not limited to the CAN-SPAM Act, General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and other data protection and marketing laws.
• You must not use the data for unlawful, abusive, harassing, discriminatory, or fraudulent activities.
• You must honor any unsubscribe, opt-out, or deletion requests you receive from individuals or businesses you contact.

StoreCensus disclaims any liability for your outreach practices. Your compliance obligations are entirely your responsibility.

9. No Warranties and Limitation of Liability

StoreCensus provides Lead Data "as is" and "as available" without warranties of any kind, either express or implied. We disclaim all warranties regarding the data's merchantability, fitness for a particular purpose, accuracy, or non-infringement.

To the fullest extent permitted by law, we shall not be liable for any damages arising out of or relating to your use of the Lead Data or your outreach activities.

10. Data Retention and Deletion

We keep Account Data for as long as your account is open. When you ask us to close your account, we delete your Account Data within 30 days, except billing records we must keep for tax and accounting purposes. Google user data is handled as described in Section 3. We retain collected business information (Lead Data) indefinitely for operational, analytical, and compliance purposes.

If you believe your information is listed incorrectly or you wish to request removal, you may submit a request at:

• https://www.storecensus.com/remove-info

Requests will be processed in accordance with applicable data protection laws.

11. Your Rights Under Data Protection Laws

Depending on your location (e.g., the European Economic Area, California), you may have rights regarding your personal data, including:

• The right to access your personal information
• The right to request correction or deletion of your information
• The right to object to or restrict certain processing activities

You can exercise these rights by contacting us at:

• support@storecensus.com

12. "Do Not Sell My Personal Information" – CCPA Compliance

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA/CPRA) to request that your personal information not be sold. To submit a request, visit:

• https://www.storecensus.com/remove-info

We will verify your identity and process your request as required by law.

13. Children's Privacy

StoreCensus is a business tool and is not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated effective date. Your continued use of StoreCensus after changes are posted constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For questions or concerns about this Privacy Policy, please contact: