Privacy Policy

The free audit reads your storefront the way a visitor does: product pages, collection pages, published reviews and public policies. It needs no login and no account.

If you give us your email address to receive your audit report, we store it with that audit and send you the report link. We send the three follow-up emails about the audit only if you tick the box asking for them.

If you create an account, we collect your name, email address and the store URL you sign up with. If you set a password, we store only a one-way hash of it, never the password itself; you can also sign in with a one-time link we email you.

• Shopify: products, collections, pages, blog posts, discount codes and order totals summed by day, when you connect a store. Reviews are read without reviewer names. Tilly does not store individual customer records from Shopify.
• Klaviyo: your lists, flows, campaigns and their results, when you connect it.
• Meta: ad accounts, campaigns, ad sets, ads and their results, when you connect it.
• Google Search Console, Google Analytics and Google Ads: see "Google user data" below for exactly what is read and how it is used.
• What you type: edits you make to a draft, approvals and dismissals, notes you leave for Tilly, and support messages you send us.
• Usage data: which pages you visit and which features you use, so we can tell what is confusing and fix it. This is measured with Google Analytics on our own website, which uses cookies; in the EU, the UK and Switzerland it runs without analytics cookies unless you accept them in the cookie banner, and you can change that choice at any time from the Cookies link in the footer. It records what was done — a page viewed, an account created, a plan bought — never your email address, your store or its data. This is separate from any Google account you connect to Tilly. We also use the Meta Pixel on our own website to measure our own ads on Facebook and Instagram: it tells Meta that a visit, an audit, a sign-up or a purchase happened, so we can see which of our ads work, and Meta may use it under its own terms. It follows the same cookie choice and does not read what you type. This is separate from any Meta account you connect to Tilly.

Tilly asks for access to a Google account only when you choose to connect one, from the Integrations page or the setup steps, through Google's own sign-in screen. You choose which Google services to connect, and each one is used only for the features described here.

• Google Search Console (read-only, scope webmasters.readonly): the list of sites you have verified, and for the site that matches your store, the search queries people used to find it, the pages they landed on, and the clicks, impressions, click-through rate and average position for each. Tilly uses this to show your search performance on Home, to base keyword research and blog topics on the searches that already bring people to your store, to find pages whose titles and descriptions are losing clicks, and to measure whether a fix you applied changed anything. Tilly cannot change anything in Search Console.
• Google Analytics (read-only, scope analytics.readonly): the list of your Google Analytics accounts and properties, and for the property that matches your store, visits, sales or key events, revenue and add-to-carts by landing page and date. Tilly uses this to measure the results of page fixes and blog posts on your own store, comparing the weeks before a change with the weeks after it. Tilly cannot change anything in Google Analytics.
• Google Ads (scope adwords): the ad accounts you can access, and their campaigns, ad groups, ads, keywords and performance results. Tilly uses this to show your results, to write new search ads that fit your existing campaigns, and — only when you press Publish on an ad you have approved — to add that ad to the ad group you chose, paused, so it spends nothing until you switch it on in Google Ads yourself. Tilly never changes budgets or bids, never switches an ad on, and never deletes anything in your Google Ads account.

Use: Google user data is used only to provide and improve the features you see in Tilly and that are described above, for you and your store. It is not used for advertising, it is not used to build profiles of you or anyone else, and it is not sold.

Storage: the access tokens Google gives Tilly are stored encrypted (AES-256-GCM) and are used only from our servers. The figures Tilly reads, and the reports and drafts built from them, are stored in our database with your workspace, and only people in your Tilly workspace can see them.

Sharing: Google user data is not shared with or transferred to anyone except (1) the AI providers listed under "Who we share it with", and only the part needed to write a draft you asked for, such as your top search queries when Tilly writes keyword research or a blog post; (2) Google itself, when you publish an approved ad to your Google Ads account; and (3) when the law requires it. No person at MyBranz reads your Google data, except with your permission to help you with a support request, when it is needed for security, such as investigating abuse, or when the law requires it.

AI models: we do not use Google user data to develop, improve or train generalised artificial intelligence or machine-learning models.

Retention and deletion: Google data is kept while the Google connection is active and your account is open. You can disconnect Google at any time from Integrations in your Tilly settings, and Tilly stops reading from it immediately. You can also remove Tilly's access from your Google account at https://myaccount.google.com/permissions. To have the Google data Tilly has already stored deleted, write to janani@mybranz.com and we will delete it within 30 days; deleting your Tilly account deletes it too.

Tilly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

To run the product: building an email, an ad or a page fix means reading your products, your past orders and your reviews so the draft is about your store and not a generic one.

To build customer personas from what your own reviews and orders actually show, never from a purchased list or a third-party audience.

To email you: the audit report you asked for, sign-in links, a note when a draft you started is ready to review, and a reminder when work is waiting for your approval. You can turn the reminders and the ready notes off in Settings, and every one of these emails has an unsubscribe link.

To bill for what you use: credits are metered against the actions in this policy's companion, the Terms of Service, and payment is processed by Stripe or by Shopify, who receive your payment details directly — Tilly never stores your card number.

To improve the product, using aggregated and de-identified usage patterns, not the content of your store or your customers' data.

Nothing you connect is published, sent or made public until you approve it. An email flow, an ad, a blog post or a page fix all sit as a draft you can read, edit or dismiss first.

We do not sell your data or your customers' data, and we do not use your store's data to build or train a product for anyone other than you.

An audit report can be opened only by someone signed in to Tilly who has its link. People in your workspace can act on it; anyone else you share the link with can only read it.

The platforms you connect: Shopify, Klaviyo, Meta and Google each receive what is needed to publish the draft you approved, through their own APIs, under their own terms.

Service providers who process data on our behalf: hosting and database infrastructure (Vercel and our database host), Resend for email, Stripe for payment, Google Analytics for measuring use of our own website, Meta (the Meta Pixel) for measuring our own ads, thum.io for screenshots of your public store pages when a page review is run, and the AI providers whose models draft the copy and creative you review. At the time of writing those are OpenAI, Anthropic, DeepSeek and xAI for writing, Google Gemini and OpenAI for images, Qwen from Alibaba (through OpenRouter) for reading screenshots, and Perplexity for web research. Each receives only what is needed for the task, through its business API.

We disclose data if the law requires it, or to protect the rights, property or safety of MyBranz, our users, or the public. If MyBranz is ever part of a merger or sale, data would move with the business only under this policy's protections, and we would tell you first.

Account and store data for as long as your account is open, plus a reasonable period afterward for backups, fraud prevention and legal obligations.

Data from a connected account, including Google, is kept while that connection is active; see the Google section above for how to have it deleted sooner.

An email address given only for an audit report is kept with that audit and used only for the emails described above, until you unsubscribe or ask us to delete it.

You can ask us to delete your account and the data attached to it at any time; see "Your choices" below.

Disconnect any connected platform at any time from your account settings; Tilly stops reading new data from it immediately.

Turn reminder and notification emails on or off in Settings, or use the unsubscribe link in any email.

Export or delete your account and the data attached to it by writing to the address below. We act on deletion requests within 30 days.

If you are in the UK, EU, or a US state with its own privacy law, you may have additional rights to access, correct, port or restrict the use of your data — the same request address handles all of these.

Businesses in the EU and UK can ask for our Data Processing Addendum (DPA) by writing to janani@mybranz.com.

Data in transit is encrypted, and connected-account tokens are stored encrypted rather than in plain text. Access to production systems is limited to the people who run Tilly. No system is perfectly secure, and we will tell you if a breach affects your data as the law requires.

Tilly is a business tool for people running a Shopify store. It is not directed at, and we do not knowingly collect data from, anyone under 16.

If this policy changes in a way that matters, we will tell you by email or by a notice in the product before the change takes effect.

Questions, requests or complaints about this policy: janani@mybranz.com. MyBranz, Inc., a Delaware corporation, 2248 Broadway #1892, New York, NY 10024, United States.