Privacy policy

Last updated: 15 November 2026

1. Who we are

Ellie is a service of Ecubate B.V., Torenallee 20, 5617 BC Eindhoven, the Netherlands, registered with the Dutch Chamber of Commerce under number 97847194 ("we", "us"). We are the controller of the personal data described here. Questions about this policy or your data: support@tryellie.io.

2. What this policy covers

This policy covers the Ellie connector at mcp.tryellie.io and this website at tryellie.io. Ellie is used from an AI assistant such as Claude: you add Ellie as a connector, sign in with Google, and connect your own advertising and analytics accounts. If you sell through Shopify, you can also connect your store by installing the Ellie app from Shopify.

3. What we collect

• Your account. When you sign in with Google we receive your name, email address and Google account identifier. We use them to identify you and to place you in your workspace.
• Your Google connection. When you connect Google we receive an access token and a refresh token for the scopes you grant: Google Ads (https://www.googleapis.com/auth/adwords), Google Merchant Center (https://www.googleapis.com/auth/content) and Google Analytics read only (https://www.googleapis.com/auth/analytics.readonly).
• Data from your Google accounts. With that connection Ellie reads, at the moment you ask for an analysis, the accounts you choose: for example campaigns, search terms, budgets, costs and conversions from Google Ads, products and their status from Merchant Center, and property settings and reports from Google Analytics.
• Your Shopify connection. When a store owner installs the Ellie app, Shopify gives us an access token and a refresh token for that store, for the permissions the owner approves. Ellie asks for read access to orders, products, inventory, online store content, navigation, metaobjects, translations, themes, discounts, markets, publications, files, shipping and marketing events. Write access, including installing a tracking pixel, is optional: each such permission stays off until someone in the store's own Shopify admin switches it on, and can be switched off there at any time.
• Data from your Shopify store. With that connection Ellie reads, at the moment you ask for an analysis, the store you connected: for example order totals per day, products and their prices, stock levels and store content. Ellie does not request the names, email addresses, phone numbers or addresses of the store's customers, and does not keep customer-level data.
• What you store in Ellie. Your workspace, its members and their roles, the clients you add, and each client's brain: decisions, logged changes and their measured results, proposals and their outcomes, notes and the analyses you save.
• Technical records. Our servers keep request logs (time, path, status code) for security and troubleshooting. They do not contain tokens or the content of your data. Every change Ellie makes to an advertising account is recorded in your workspace.

4. How we use Google user data

We use data received from Google APIs only to provide the features you ask Ellie for: listing your accounts, running audits, saving the results you choose to keep in a client's brain, and making a change to a Google Ads account after you have confirmed it.

Ellie's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We do not use or transfer Google user data for advertising, including retargeting, personalised or interest-based advertising.
• We do not sell Google user data.
• We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine learning models.
• We transfer Google user data to others only as needed to provide or improve the features you use, to comply with the law, for security, or as part of a merger or acquisition with prior notice to you.
• No person at Ecubate reads your Google user data unless you ask us to (for example for support), it is needed for security or to investigate abuse, or the law requires it.

5. How we use Shopify data

We use data received from a Shopify store only to provide the features the store's owner or their team asks Ellie for: comparing advertising with the store's real sales, running audits, saving the results they choose to keep in a client's brain, and making a change to the store after they have switched on that permission in Shopify and confirmed the change. For data about the store's customers we act on behalf of the merchant, who remains responsible for it towards their customers.

• We do not sell Shopify data or use it to advertise to the store's customers.
• We do not use it to develop, improve or train generalised AI or machine learning models.
• We answer Shopify's privacy requests: a customer data request or erasure request finds no customer-level data in Ellie, and a store erasure request removes the store's connection.

6. Your AI assistant

Ellie returns the results of your requests to the AI assistant you connected it to, such as Claude by Anthropic, because you asked for them there. That provider processes those results under your own agreement with it. Ellie does not send your data to any AI provider by itself.

7. Where your data is stored and how it is protected

• The Ellie service runs on Google Cloud in the Netherlands (region europe-west4). The database runs on Supabase in Frankfurt, Germany (region eu-central-1).
• Google and Shopify tokens are stored encrypted in the database's vault, per workspace. They are never shown to you, to your AI assistant or in our logs.
• Every workspace is kept apart by row-level security in the database: a request made for one workspace cannot read or change the data of another.
• All traffic to and from Ellie is encrypted with TLS.

8. Who we share data with

We use these subprocessors to run Ellie, each under a data processing agreement:

• Google Cloud (Google Cloud EMEA Ltd): hosting of the Ellie service.
• Supabase (Supabase Inc.): database, encrypted token storage and backups.

We do not sell personal data and do not share it with anyone else, except where the law requires it.

9. How long we keep it

• Data read from your Google accounts is used for the request it was read for. Only the analyses and records you or your AI assistant save to a client's brain are kept.
• Your Google tokens are kept until you disconnect: you can revoke Ellie's access at any time at myaccount.google.com/permissions, after which Ellie can no longer read your Google accounts.
• Your Shopify tokens are kept while the Ellie app is installed. When the store uninstalls the app, Ellie deletes the store's connection and its tokens at once.
• Your workspace and its brains are kept while your workspace exists. When you ask us to delete your workspace, we delete it within 30 days, including its tokens and every client's brain. Database backups are overwritten within 7 days after that.
• Request logs are kept for at most 30 days.

10. Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to receive it in a portable format (Ellie can export a client's whole brain as one JSON document), to object to or restrict its processing, and to withdraw consent. Write to support@tryellie.io; we answer within 30 days. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Legal basis

We process your data to perform our agreement with you (providing Ellie), on the basis of your consent for the Google and Shopify connections, and on our legitimate interest in keeping Ellie secure.

12. Children

Ellie is a business tool and is not meant for anyone under 16.

13. Changes

When we change this policy we update the date at the top. When a change affects how we use Google user data, we tell you before it takes effect and ask for your consent where needed.