privacy policy

By using Mable’s services you are granting us access to private data which we undertake to handle in a secure and confidential way. The types of data you share with us are covered below.

‍

‍Secure data transfer and storage

‍When Mable requests or sends your data to web services you opt into, or to display data in your browser, this is done via a secure (SSL) web connection. Any of your data that we store to provide your services is in a database hosted on Google or AWS servers in North Virginia, USA (with the highest security precautions), and accessible only to our web servers (for your viewing) and a select number of mable employees and contractors.‍

‍

Email and password

‍We use your email to provide customer support, and infrequently promote new products and services to you (only from Mable). You can opt out of these emails. We promise never to share this email address with third parties.Your password is encrypted at rest.

‍

‍Google login

‍By connecting your Google account you are granting us access to your name, Google+ page and profile image, your email address and all Google Analytics properties linked to your account

‍

‍Google Analytics

‍Mable pulls a range of data from your Google Analytics account. We use this data to: (a) Provide customised HTML displays of your website performance, and accessible only via your Google account or (with explicit permission from you) to other members your invite to your mable account. (b) Test new analytic methods and visualizations for our internal use. Your data will only be accessible by Mable’s European Union based employees and contractors, bound by a non-disclosure agreement(c) Provide anonymised benchmarks to other customers. We promise this will never be identifiable to you or your website, and will only be used in aggregate segments of at least 10 benchmark companies – so that your performance cannot be inferred from the benchmark sending Personally Identifiable Information (PII) about your end users to Google Analytics (for example, customer email addresses) is in breach of Google’s terms as well as our Terms.

‍

‍Shopify stores

‍Our Shopify apps pull historic and current customer orders in order to feed this information onto your chosen destinations. We only store non-personal information (order numbers, transaction amounts and product names), and only for up to 3 months for reconciliation and audit purposes.Where you ask us to send PII customer data from Shopify to a destination (e.g. Segment.com) we pass this information straight on without storing in our own database.

‍

‍Facebook Ads

‍We ask for permission to access your Facebook Ads account to pull:(a) Your Facebook email, which is stored for audit but not used for communication(b) Which ads are currently running and metafields about those Ads(c) The daily performance of those Ads (cost, clicks etc)

‍

‍GDPR compliance

‍Mable is a Data Controller under GDPR legislation. You have a right of access to, rectification of and erasure of the personal data Mable stores about you. If you wish to access your personal data or ask us to erase it, please use this form.

‍

Use of Google OAuth & Google User Data

1. Scope of Access
   • Our application (“Mable”) does not collect or store any personally identifiable information (PII) from your Google account. Instead, we only access application-specific data such as conversion information (e.g., aggregated analytics or performance metrics).
   • We do not request access to, nor store, any user profile details like name, email address, or other personal data through Google APIs.
2. Purpose of Access
   • Any data pulled via Google OAuth is strictly used to provide and enhance user-facing functionality within Mable. Specifically, we use it to display or calculate conversion metrics, statistics, and similar non-PII analytics.
   • We do not use Google user data for marketing, advertising, or profiling purposes.
3. Data Storage and Retention
   • No Personal Data Stored: Because Mable does not request or collect personal data through Google OAuth, we do not store such data on our servers.
   • Application-Specific Data: We temporarily store non-personal and anonymized conversion statistics (or similar metrics) in order to provide our services.
   • Retention Period: We retain this application-specific data only for as long as you continue to use Mable. If you discontinue using Mable, we will securely delete the associated data within 60 days of account closure or inactivity.
4. Data Sharing and Disclosure
   • We do not sell or rent any Google user data to third parties.
   • We only utilize reputable third-party cloud infrastructure providers (such as Google Cloud, Datadog, Oracle Cloud, and AWS) to host and process data on our behalf. These providers are bound by strict confidentiality and data protection obligations.
   • We do not otherwise share, transfer, or disclose your data with any other external entities unless required by law.
5. Data Protection and Security
   • All data transfers between Mable and Google services occur over secure (SSL/TLS) connections to protect data in transit.
   • We employ access controls, encryption (where applicable), and monitoring to help safeguard data stored on our servers.
   • Access to our databases is restricted to a limited set of authorized Mable employees and contractors, each bound by strict confidentiality agreements.
6. User Rights and Controls
   • Data Deletion: Since Mable does not store personal data from your Google account, there is no personal information to request for removal. You may, however, request deletion of any non-personal, application-specific data we hold on your behalf by contacting us directly.
   • Account Closure: If you close your Mable account, we will delete any stored conversion statistics or metrics within 60 days as described above.

‍