Bearing Privacy Policy

Bearing is a profit dashboard for Shopify brands. It is made by WEBPRISM. In this policy, "we" means WEBPRISM. "You" means the merchant who installs Bearing.

What data we collect

• Your account: your name, email address and login details. If you install from Shopify, we read the shop email while connecting the store. The login we create uses an address at users.trybearing.app until you claim your own email.
• Your Shopify store: with your permission, we read orders (totals, discounts, shipping, taxes, refunds, dates), products (titles, variants, prices, unit costs), and Shopify bills you import (app and platform fees) to count them as costs.
• Your ad accounts: if you connect them, we read ad spend and campaign results from Google Ads, Meta and Snapchat, with read-only access. TikTok, X and Pinterest are "coming soon" and cannot be connected yet.
• Klaviyo: if you connect Klaviyo, we read campaign and list data to show in your reports.
• Data you enter: expenses, recurring costs, campaigns, goals and settings.
• Usage data: pages you view, features you use and error logs. We use this only to run and improve Bearing.

We do not store customer names, email addresses, phone numbers or addresses.

How we use data

To show your profit, revenue, costs, ad spend and forecasts. To reply to support email. Team invites and password resets are links you copy from the app. To fix bugs and keep the service reliable. We do not sell your data. We do not use your data to show ads. We do not use your data to train AI models.

Google user data

We use Google Ads data only to show spend and results in your Bearing dashboard. Our use of data from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

AI assistants and API keys

You can create API keys to let AI assistants read your Bearing data. An assistant can only see data from your organization, and only while the key is active. You can revoke a key at any time in Settings. We log key use when an assistant changes data, and when a call is rejected.

Who processes data for us

Shopify (store data and plan billing). Railway (hosting and database). PostHog (product analytics and error tracking). Postmark, through our support system (support email). Google, Meta, Snapchat and Klaviyo: only when you connect them, to read your own data.

How long we keep data

While Bearing is installed, we keep your data so reports stay complete. Synced ad data stays while your account is connected. A backfill looks back up to 24 months. When you uninstall, we stop syncing. When Shopify sends the shop redact request (48 hours after uninstall), we delete the store's orders, campaigns, expenses and related data. Organization-level ad account connections, ad spend history and product snapshots stay until you ask us to delete them at support@trybearing.app.

Security

We use encryption in transit (TLS). We store ad-account tokens, Klaviyo keys, and custom-app client secrets in encrypted form. The Shopify access token for your store is stored so we can sync your shop. We limit staff access. No system is 100% secure.

Your rights

You can see, fix, export or delete your data; disconnect any ad account or Klaviyo at any time in Settings; and uninstall Bearing to stop all data access. To make a request, email privacy@trybearing.app. We reply within 30 days.

Cookies

We use session cookies to keep you signed in, and local storage for dashboard settings. We do not use advertising cookies.

Changes

If we change this policy in a big way, we will tell you by email or in the app.

Contact

Privacy: privacy@trybearing.app. Support: support@trybearing.app.