Privacy policy

Lighter Fluid Privacy Policy

Effective date: October 23, 2026

Last updated: October 23, 2026

This policy explains how Lighter Fluid, Inc. ("Lighter Fluid," "we," "us") handles information on our website, lighterfluid.co, and in Lighter Fluid Connect ("Connect" or "the app") at connect.lighterfluid.co, including our Shopify app. Connect is a web app our clients use to connect their business accounts so we can audit and manage their marketing.

Connect is for businesses. It is not meant for consumers or for anyone under 18.

Who this policy covers

  • Website visitors. People who browse lighterfluid.co, contact us or book a call.
  • Client users. People at our client companies who sign in to Connect and connect accounts.
  • Our clients' customers. Shoppers whose order and contact details sit in a client's Shopify store. We never deal with these people directly. We process their data only for the merchant (see "Shopify customer data" below).

What information we collect

Information you give us

  • Your name, work email address, company name and role when you sign in or are invited.
  • API keys you create in your own Klaviyo, Triple Whale or Microsoft Clarity accounts and paste into Connect.
  • Messages you send us, such as support or privacy requests, and details you enter when you contact us or book a call on our website.

Information from accounts you connect

When you connect an account, you sign in with that platform and approve specific permissions. We receive an access token and the data those permissions allow. We only request what we need for the services in your agreement.

  • Shopify (Admin API): read access to orders (including order history), products, inventory, customers, discounts, analytics and reports, store content, themes and Shopify Payments payouts. We do not request customers' names, emails, phone numbers or addresses. If you grant more access later, we can also edit themes, pages, products, inventory, discounts, product feeds and orders.
  • Meta (Facebook and Instagram): ad reporting (ads_read), Business Manager assets (business_management), product catalogs (catalog_management), and Page and Instagram insights. If you grant more access later: managing ads (ads_management), and publishing posts, replying to comments and messages, and tagging products on your Page and Instagram account.
  • Google: Google Analytics, Search Console, Tag Manager, YouTube and YouTube Analytics (read-only), Google Ads, and Merchant Center. If you grant more access later: editing Analytics settings, submitting sitemaps and editing Tag Manager containers (never publishing).
  • Klaviyo, Triple Whale and Microsoft Clarity: the data available through the API key you provide.

Information collected automatically

Our hosting provider records basic technical logs, such as IP address, browser type and request times, to keep the app running and secure. Connect uses only the cookie that keeps you signed in; it has no analytics or advertising cookies. Our website, hosted on Shopify, uses Shopify's standard cookies and may use analytics to understand visits; you can manage these with your browser or our cookie banner where shown.

How we use information

We use connected-account data only to provide the services you hired us for under your services agreement with Lighter Fluid. That means:

  • Running audits of your ads, analytics, email, search and store performance.
  • Building reports for you.
  • Managing campaigns, email and site changes on your behalf, as your agreement allows.
  • Keeping the app secure, fixing problems, and meeting legal obligations.

We do not sell your data. We do not use it for our own advertising. We do not use it to build profiles of people for anyone else.

AI analysis

We use Anthropic's Claude API to help analyze your data and draft audits and reports. We send only the data needed for the task. Under our provider's commercial terms, which prohibit training on our data, this data is not used to train AI models. We do not use your data, including any data received from Google APIs, to train generalized AI or machine learning models.

Google user data

This section covers data we receive from Google APIs (Google Analytics, Google Ads, Search Console, Merchant Center, Tag Manager and YouTube).

  • What we access: analytics reports and settings, Google Ads account, campaign and performance data, Search Console performance and indexing data, Merchant Center product and feed status, Tag Manager containers, and YouTube channel analytics, for the properties and accounts you authorize. Edit access is used only if you grant it.
  • How we use it: only to produce your audits and reports and, where you grant edit access, to make the changes you have asked us to make (such as managing Google Ads campaigns or fixing product feed errors). These are the features you see in Connect and in our work for you.
  • How we store it: tokens are encrypted with AES-256-GCM in our US-hosted database. Report data is stored only as long as needed to deliver the service (see "How long we keep data").
  • How we share it: we do not transfer it to anyone except as needed to provide or improve the features you use, for security, to comply with the law, or as part of a merger or sale where you are told first. We send parts of it to our AI provider for analysis, as described above.
  • What we never do: we do not sell Google user data. We do not use or transfer it for advertising, including personalized or retargeted ads. We do not give it to data brokers or information resellers. We do not use it to determine creditworthiness or for lending. We do not use it to train generalized AI or machine learning models.
  • Human access: Lighter Fluid staff read this data only to deliver the services you have asked for (with your consent under your services agreement), for security or abuse investigations, to comply with the law, or in aggregated, anonymized form for internal operations.

Lighter Fluid's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta data

We use data from Meta only to audit, report on and manage the ad accounts, catalogs, Pages and Instagram accounts you authorize. We follow the Meta Platform Terms. We do not sell this data, use it to build audiences for anyone else, or share it with data brokers. To have this data deleted, see our Data Deletion page.

Shopify customer data

Your Shopify store may hold your customers' names, email addresses, addresses and order history. For this data:

  • You (the merchant) are in charge of it. We act as your service provider (or "processor") and use it only to provide services to you.
  • We do not contact your customers for our own purposes, sell their data, or combine it with other clients' data.
  • We respond to Shopify's privacy webhooks: customers/data_request (we send you the data we hold about that customer within 30 days), customers/redact (we delete that customer's data within 30 days) and shop/redact (after you uninstall our Shopify app, we delete your store's data within 30 days).

Who we share information with

We share data only with service providers that help us run Connect, and only what they need:

  • Resend: sending sign-in and invitation emails.
  • Railway: app hosting, database and file storage, US region.
  • Anthropic: AI analysis through the Claude API.
  • Google: optional "Continue with Google" sign-in (name and email only).
  • Shopify: hosting for our website, lighterfluid.co.

We may also share information if the law requires it, to protect people or our systems from harm or fraud, or as part of a merger, acquisition or sale of assets. If that happens, we will tell you before your data falls under a different privacy policy.

We do not sell personal information. We do not "share" it for cross-context behavioral advertising as defined under California law.

How we protect information

  • OAuth tokens and API keys are encrypted at rest with AES-256-GCM.
  • Data is sent over encrypted connections (HTTPS/TLS).
  • Access is limited to Lighter Fluid staff who need it to do the work, through role-based permissions, and every change to access is logged. Sign-in uses one-time email links or Google sign-in; there are no passwords to steal.

No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.

How long we keep data

  • While connected: we keep tokens and connected-account data while the account is connected and your services agreement is active.
  • When you disconnect: stored tokens are deleted immediately. We delete the rest of that account's data within 30 days.
  • When you stop working with us: we delete your stored tokens, keys and connected-account data 30 days after your account is archived.
  • Logs: activity and security logs are kept for 12 months.
  • Backups: deleted data rolls out of our encrypted backups as they expire, within about five weeks.
  • Finished reports and deliverables we have already given you may be kept as part of our business records under your services agreement.

Your choices and rights

  • Disconnect anytime. In Connect, open the account and choose Disconnect. This deletes the stored token right away.
  • Revoke access at the source. You can also remove Lighter Fluid's access in your Google, Meta or Shopify settings, or delete the API key you gave us.
  • Ask for access, correction or deletion. Email ops@lighterfluid.co. We reply within 30 days.
  • Depending on where you live (for example, California or the EU/UK), you may have more rights under local law. We will honor them as required. We will not treat you differently for using them.

If you are a shopper at one of our clients' stores, please contact that store first. We will help the store respond.

Where data is stored

We store data in the United States. If you are outside the US, your data will be moved to and processed in the US. For clients in the EU or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) for these transfers.

Changes to this policy

If we make important changes, we will update the date above and tell active clients by email or in the app before the change takes effect.

Contact us

Lighter Fluid, Inc.
3833 E Main St, Saint Charles, IL 60174, United States
Email: ops@lighterfluid.co