Privacy Policy

Data controller

Metly ApS, CVR 46681754, Aarhus, Denmark, is the data controller for the processing described in this policy. You can contact us at support@metly.dk.

What data we process

We process the following categories of data:

• Account data: your name, email address, and store domain when you create and use a Metly account.
• Store data from Shopify: orders, products, and inventory from the store you connect. This data may contain information about your customers, including name, email address, and shipping address.
• Enquiries: your email address if you write to us.

Purposes and legal basis

We process data for the following purposes:

• To deliver Metly's analysis, forecasts, customer insights, and recommendations — on the basis of our agreement with you (GDPR art. 6(1)(b)).
• To operate, improve, and secure the product — on the basis of our legitimate interest (GDPR art. 6(1)(f)).
• To answer your enquiries — on the basis of your consent (GDPR art. 6(1)(a)).

Our role: data processor for your store

For your customers' data, you (the merchant) are the data controller. Metly processes store data on your behalf as a data processor and only on your instructions. The detailed terms are set out in our Data Processing Agreement.

Who we share data with

We only share data with sub-processors that are necessary to operate the product:

• Supabase — hosting and database (EU).
• Mistral AI — AI generation of recommendations and explanations (EU).
• Shopify — the source of your store data.

How we do not use your data

We do not sell data, and we do not use it for advertising, cross-store profiling, or any purpose outside of delivering the product.

International transfers

Store data is hosted in the EU, and our AI provider (Mistral AI) is an EU company. Some sub-processors, including Shopify, may process data outside the EU/EEA. Such transfers only take place on the basis of appropriate safeguards, including the EU Commission's Standard Contractual Clauses.

Storage and deletion

We only keep data for as long as necessary for the purpose. Store data (orders, products, inventory, and linked customer details) is kept for up to 36 months after a customer's last activity (their most recent order), after which it is deleted automatically.

When the collaboration ends, the app is uninstalled, or we no longer have a legal basis, we delete the data in question — including your customers' names, email addresses, and addresses.

Your rights

Under the GDPR you have the right to:

• Access the data we process about you (art. 15).
• Rectification of inaccurate data (art. 16).
• Erasure ("right to be forgotten") (art. 17).
• Restriction of processing (art. 18).
• Data portability (art. 20).
• Object to processing (art. 21).
• Withdraw consent (art. 7(3)).

How to exercise your rights

Contact us at support@metly.dk. We generally respond within one month.

Your customers' rights

Your customers should contact you as the data controller to exercise their rights. Metly supports this through Shopify's standard data request and redaction procedures.

Complaints

You have the right to lodge a complaint with the Danish Data Protection Agency (datatilsynet.dk) if you believe our processing does not comply with the GDPR.

Cookies

Necessary cookies are required for Metly to function (login, language preference and the consent record itself). Analytics cookies are optional and are only set once you give consent.

You can withdraw your consent at any time via "Cookie settings" in the footer. When you reject or withdraw consent, the analytics cookies already set are deleted.

We use Google Analytics (Google Ireland Ltd.) as a processor. Read more in Google's privacy policy.

Changes

We may update this policy from time to time. The latest version is always available on this page.