Skip to content
Get my free audit
Legal

Privacy Policy

Last updated November 4, 2026. Applies to Shoptician at shoptician.com and app.shoptician.com, and to app.onlinelabs.io until it moves there.

This policy explains what Shoptician collects and why. It says who receives the data and what you control. It covers the website, the app, our emails and the share links you create. Our Terms of Service apply alongside it.

In short

1. Who we are

Shoptician is operated by Denis Kabakov, known as Dan Kabakov. He is an individual entrepreneur registered in Georgia (the country). He trades as Online Labs. In this policy "we", "us" and "our" mean him as the operator of Shoptician.

We are the controller of the personal data this policy describes, with one exception. Your connected accounts may hold personal data about other people, such as the emails of other users of a Google Ads account. For that data we act as your processor, under section 12 of our Terms of Service. For any privacy question or request, email hello@shoptician.com.

2. Who this policy covers

Shoptician is a tool for businesses, such as store owners, marketers and agencies. The people who use it act for a business. This policy covers their personal data. It also covers personal data inside the accounts they connect. One example is the email addresses of users who can access a Google Ads account.

3. What Shoptician does

Shoptician audits Google Ads accounts for ecommerce stores. You connect your Google account. The app reads your data, runs its checks and shows you a report. It never changes your accounts.

4. Data we collect

You need an email address and a role to use Shoptician. Everything else is optional. Some tools need certain details or connections. Without them those tools stay locked.

5. How we use data and why

We use personal data only for the purposes below. The legal bases come from the EU and UK GDPR. Georgian law has similar grounds.

Where we rely on legitimate interests, we have weighed them against your rights. The data involved is limited and mostly about business accounts. These are uses you would expect from a tool like this. You can object at any time, as section 19 explains.

6. Google user data

This section covers data we receive through Google APIs. Google calls it Google user data.

What we read

How we access it

We ask for Merchant Center and GA4 access only when you choose to connect them.

Why we use it

We use Google user data only to provide and improve the audit features you see in the app. That means reading your accounts, running checks, writing summaries and showing your reports.

Where we store it

Reports and account lists are stored in a Cloudflare D1 database. Google access tokens are stored in Cloudflare Workers KV, apart from your reports. Tokens never enter the database. Cloudflare encrypts both stores at rest with AES-256. Data travels over HTTPS between your browser, Shoptician and our providers. Numbers for the overview page are cached for up to 30 minutes.

Who processes it

Only these providers receive Google user data. Each one gets it only to run a feature you use.

When a person sees it

Nobody at Shoptician reads your Google user data unless one of these applies:

People you give a share link to can also see that report. Section 14 explains share links.

What we never do

Limited Use

Shoptician's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deleting

When you disconnect Google in Settings, we ask Google to revoke our access. We delete the stored tokens and your lists of connected accounts right away. Reports you already have stay in your account until you delete it. You can also ask us by email to delete specific reports. When you delete your account, we delete it from the app, as sections 17 and 18 explain. You can also remove our access at myaccount.google.com/permissions. If you do, the app deletes its stored token the next time it tries to use it.

7. Free review by Dan

A report page has a button: "Send my report to Dan for a free review". Next to it is this sentence: "I agree that Dan Kabakov can see this report, keep my details in his CRM and email me about it." Nothing is sent until you click it. When you click it:

Send a report about a client's account only if that client has agreed. You can withdraw your agreement at any time by emailing hello@shoptician.com. We then delete the review details we hold, unless the law requires us to keep them.

8. AI features

9. Service providers and what each receives

We use these providers to run Shoptician. Each one handles data under its own terms and data processing terms. Each one gets only what its task needs.

Emails you send us and the free review email are kept in our business mailbox.

10. Pages we load from your store

To check tags, consent, speed, trust signals and links, the app loads public pages directly:

These pages are public. We keep only what the checks need, such as the tags found and the test results.

11. What stays in your browser

12. Emails from us

We send sign-in codes. We may also email you about your results or about Online Labs services. Online Labs is the business behind Shoptician.

Opting out of marketing does not stop service emails. Those continue while you have an account.

13. Anonymous statistics

We may combine results across many audits into statistics. Examples are how often a check passes or the median score by spend band. We use them only inside Shoptician, to improve the checks and the app. Each figure comes from at least 50 accounts. It never names you, your store, your account or your campaigns. No single account can be picked out of it. Accounts that Online Labs manages for its own clients are left out. Nobody reads a single report to make these figures. We do not publish statistics built from Google user data.

14. Other sharing

We do not sell personal data. We do not share it for cross-context behavioral advertising.

15. International transfers

We operate from Georgia. Our providers process data in the United States, the European Union and other countries where they run servers. Cloudflare serves pages from data centers near you.

When data leaves the EU, the UK or Georgia, we rely on the safeguards each provider offers. These include the European Commission's standard contractual clauses, the UK addendum and the EU-U.S. Data Privacy Framework, where a provider uses them. If Georgian law ever requires your consent for a transfer, we will ask for it first. You can ask us for details of these safeguards.

16. Security

No system is perfectly secure. If a breach puts your data at risk, we will notify the competent authority within 72 hours where the law requires it. In Georgia that is the State Audit Office. We will also tell you without undue delay where the law requires it.

17. How long we keep data

We may delete data sooner, for example if the beta ends. If we do, we will tell you first so you can export it. This does not apply when we close an account for abuse, security or legal reasons.

18. Your controls

You can also email hello@shoptician.com to ask for access, correction or deletion.

19. Your rights

Depending on where you live, you may have these rights over your personal data:

Direct marketing. You can object to direct marketing at any time, free of charge and without giving a reason. We will then stop.

To use a right, email hello@shoptician.com from your account email. We may ask you to confirm who you are. We answer without undue delay and within the time the law sets. Under the GDPR that is one month.

Complaints. You can complain to a data protection authority. In the EU, the EEA or the UK, that is the authority where you live or work. In Georgia it is the State Audit Office of Georgia. We would like to hear from you first, so we can try to fix the problem.

20. Automated decisions

Shoptician scores ad accounts automatically. A score is about an ad account, not about you as a person. It has no legal or similarly significant effect on you. We make no automated decisions about you in the sense of Article 22 of the GDPR.

21. Children

Shoptician is for businesses. It is not meant for anyone under 18. We do not knowingly collect data from children. If you think a child has signed up, email us and we will delete the account.

22. Changes to this policy

We will post changes on this page and update the date above. If a change is material, we will tell you by email or in the app before it applies to you. We will not use Google user data in a new way without asking for your consent first.

23. Contact

Questions or requests: hello@shoptician.com. Operator: Denis (Dan) Kabakov, individual entrepreneur registered in Georgia, trading as Online Labs.