Privacy Policy

This Privacy Policy explains what information Follow The Spend ("FTS", "we", "us") collects, how we use it, and the rights you have over it. We've kept it short on purpose.

1. Who we are

FTS is operated by Inforah Private Limited, based in Ahmedabad, Gujarat, India. For any privacy question, write to us at hello@followthespend.com.

2. What we collect

2.1 From you (the merchant)

• Your name and email when you sign up
• Country, currency, and Shopify store URL during onboarding
• Billing details for paid plans: card information is handled by our payment processor; we never see or store your card data
• Anything you write to our support team

2.2 From your Shopify store (after you connect it)

• Order data delivered via Shopify webhooks (totals, customer IDs, line items, fulfilment status)
• Storefront events from the IQPix pixel: page views, sessions, conversions, UTM parameters, add-to-cart and checkout initiations
• Hashed email and hashed phone from the checkout, used only to stitch visitor journeys to orders. The hash is one-way: we cannot reverse it back to the original email or phone number

2.3 Technical data

When you use the dashboard we automatically log your IP address, browser and device info, and dashboard pages accessed, used only for security, debugging, and uptime monitoring.

2.4 Prospect & marketing-lead data

When you submit your details on one of our marketing or landing pages, we collect the email address you provide (required), plus your phone number and Shopify store URL if you choose to add them. We use these to follow up about Follow The Spend, to send you product and marketing communications, and to measure and improve our advertising. See Section 5 for how this data is shared with advertising platforms.

3. Why we collect it

Solely to power your FTS dashboard: showing you which marketing sources drove which orders, and how each visitor reached you. We do not sell your data or your customers' data, and we do not share your merchant account data or your store visitors' data with advertisers, data brokers, or any other third party for marketing. The one exception is the prospect data you submit on our landing pages (Section 2.4), which, with your consent, we use for marketing email and share in hashed form with advertising platforms to measure and improve our ads (Section 5).

4. How long we keep it

• Raw pixel event data: 90 days, then aggregated or deleted
• Order and attribution data: for as long as your subscription is active, plus 30 days after cancellation
• Account data: until you request deletion, or 90 days after account closure (whichever is sooner)
• Billing records: 7 years (required by Indian tax and accounting law)
• Backups: encrypted backups roll off after 30 days

5. Who we share it with

We use a small set of trusted service providers: hosting, authentication, payment processing, transactional email, and uptime/error monitoring, each bound by a data-processing agreement and instructed to process data only on our behalf.

The Shopify integration (your store) and Google (if you sign in with your Google account) are the two third parties you interact with directly.

Advertising partners. With your consent, given when you submit a form on one of our landing pages, we share a hashed, irreversible version of your email and, where provided, your phone number with advertising platforms. This is used only to measure which ads led to sign-ups and to build audiences of similar businesses. We share the minimum needed for measurement and audience-building, and we do not sell your data. This sharing applies only to landing-page prospect data, never to your merchant account data or your store visitors' data. You can opt out any time by emailing hello@followthespend.com, and you can unsubscribe from marketing email using the link in any message.

6. Cookies

The IQPix pixel installed on your storefront sets the following first-party cookies on your store's visitors. These are not advertising cookies, we don't use them to track anyone across other websites.

The FTS dashboard itself (app.followthespend.com) uses essential session cookies for sign-in. These are necessary and cannot be disabled without preventing login.

7. Your rights

At any time you can:

• Access: request a copy of the data we hold on you
• Correct: ask us to fix anything inaccurate
• Delete: request deletion of your account and associated data
• Export: receive your data in a machine-readable format
• Cancel: stop further data collection at any time from your billing settings

Email hello@followthespend.com and we'll respond within 30 days. Some retention may continue where the law requires it (e.g. billing records).

8. Security

We encrypt sensitive tokens at rest (AES-256), use TLS in transit for everything, restrict access with role-based controls, and audit our dependencies regularly. No internet transmission is 100% secure, and we cannot guarantee absolute security, but we treat your data the way we'd want ours treated.

9. India: Digital Personal Data Protection Act (DPDP)

We are an Indian company subject to the DPDP Act, 2023. We are the Data Fiduciary for your merchant account data, and a Data Processor for your store visitors' data (where you, the merchant, are the Data Fiduciary). We will update this section as the DPDP Rules are notified by the Government of India.

10. Children

FTS is a business-to-business product and is not directed at anyone under 18. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may update this policy from time to time. Material changes are emailed to account owners and shown as an in-dashboard notice at least 14 days before they take effect.

12. Contact us

Inforah Private Limited
Ahmedabad, Gujarat, India
Email: hello@followthespend.com