Privacy policy

What we collect, and what we do with it

Margio is a financial intelligence app for Shopify merchants. This policy explains exactly what data we handle, why, who else touches it, where it lives, and how to get it removed. Plain language, no surprises.

Last updated: 15 June 2026

Who we are

Margio provides the Margio app for Shopify. We are the data controller for the information described here. You can reach us about anything in this policy, including data access or deletion requests, at support@margio.app.

What we collect

Your Shopify store data

When you install Margio, we read your store's orders, products, inventory and Shopify Payments payouts through Shopify's API. This includes order history, line items, taxes collected, and payouts. To show which products drive repeat purchases and how customer segments behave, we link each order to its Shopify customer ID and the region it shipped to. We do not collect or store your customers' names, email addresses, or other contact details. We use this to build your dashboards, product and repeat purchase insights, customer segments, costs and margins, and your tax and financial reports.

Your bank data (Pro plan only)

If you connect a bank account on the Pro plan, we receive a read only feed of your transactions and balances through Plaid. We cannot move money or change anything in your account. We never see or store your bank login. We use this data to verify your real cash flow, profit and loss, and reconciliation.

Your advertising and payment data (when you connect those accounts)

If you connect an advertising or payment account, such as Google Ads, Meta, or PayPal, we receive a read only feed of your own cost and performance figures from that account. For advertising accounts that is your campaign spend and headline performance, such as amount spent, impressions, clicks, and conversions. For payment accounts it is your transaction fees. We use this only to include your real advertising costs and fees in your profit, margin, and cash flow figures. We never change anything in those accounts, and we never see your login. You can disconnect any of them at any time in Settings.

Account and usage data

We store your store domain, currency, timezone, plan and settings, plus basic technical logs needed to run the service securely.

Launch waitlist email

If you join our launch waitlist on the homepage, we store the email address you enter so we can email you once when Margio opens. We use it for that single launch notification only, never sell or share it, and you can ask us to remove it at any time by emailing the address in the Contact section below.

Who processes your data

We never sell your data and never share it with advertisers. We use a small number of trusted providers to deliver the features you turn on:

  • Plaid connects your bank, on the Pro plan, and provides the read only transaction feed. Your bank login goes only to your bank through Plaid's secure screen. How Plaid handles your information is set out in the Plaid End User Privacy Policy.
  • Anthropic powers the AI analyst. When you ask the analyst a question, the relevant figures are sent to Anthropic to generate your answer. That data is used only to produce your response, not to train any AI model. If you turn AI off in Settings, nothing is ever sent.
  • Cloud infrastructure for hosting and our database is provided by reputable infrastructure providers located in the United States, under contractual data protection terms.
  • Google Analytics measures how visitors use our public website, and only after you accept cookies. It never receives your store or bank data.

We can provide the current named list of providers on request at support@margio.app.

Google user data and Limited Use

When you connect a Google account, such as Google Ads, Margio accesses your advertising cost and performance data through Google APIs, with read only permission and only after you grant access. We use this data solely to show your real advertising costs inside your own Margio reports. We do not use it for advertising, we do not sell it, and we do not share it, other than as needed to provide the feature to you or where the law requires.

Margio's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and analytics

Our website

On our public website at margio.app we use Google Analytics 4 to understand how visitors find and use the site, and to measure how many people start an install. This is separate from the Margio app: the app you use inside Shopify does not run Google Analytics.

Only with your consent

Analytics cookies are not set until you accept them in the cookie banner. If you decline, no analytics cookies are stored and the Google tag is never loaded. You can change your choice at any time using the Cookie preferences link in the footer.

What Google Analytics sees

When enabled, Google Analytics collects standard usage data such as the pages you view, the approximate region derived from your IP address, your device and browser type, and how you arrived. We do not use it to identify you personally, and we never link it to your store or bank data. Google processes this data as our provider, including in the United States. You can read how Google handles it in the Google Privacy Policy.

Where your data is stored

Your data is stored on secure cloud infrastructure located in the United States. If you are in the UK, EU, or elsewhere, your data is transferred to and processed in the United States under appropriate safeguards, including standard contractual clauses with our providers. Each merchant's data is isolated, so removing yours never touches anyone else's.

How long we keep it, and deletion

While you use Margio

We keep your data for as long as the app is installed so your reports and history keep working.

When you disconnect your bank

We tell Plaid to revoke the connection and delete the connection credentials from our records. Your past transactions stay in your account so your reports keep working, until you uninstall.

When you uninstall

Access ends immediately, and all of your data is permanently deleted within 48 hours through Shopify's standard data removal process. If one of your customers asks to be removed, Shopify forwards that request to us and we erase that customer's personal data from our records.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold, and to object to or restrict certain processing. This includes rights under the UK GDPR, EU GDPR, Canada's PIPEDA, and the California Consumer Privacy Act. To exercise any of these, email support@margio.app and we will respond within the time the law requires. You can also uninstall the app at any time to trigger full deletion as described above.

How we protect your data

Bank and Shopify access tokens are encrypted at rest. The bank connection is read only. Access to your data is restricted and every merchant's data is isolated. We collect only what the features you use actually need.

Changes to this policy

If we change how we handle your data, we will update this page and the date above. Significant changes will be communicated in the app.

Contact

Questions, or a data request? Email support@margio.app.