CGW Privacy Policy

ZDS Ventures LLC — Last updated: August 9, 2026

This Privacy Policy describes how CGW (“the Service”), operated by ZDS Ventures LLC, collects, uses, stores, and deletes data when you connect a data source — including Shopify, Klaviyo, Meta, Google Analytics 4 (GA4), or Google Ads — to CGW. By connecting any data source, you agree to this policy.

1. Who We Are

CGW is developed and operated by ZDS Ventures LLC, a company registered in California, United States. Palo Alto, CA is our place of business. For questions about this policy, contact us at me@zekeds.com.

2. What Data We Access

CGW accesses data only from the data sources you explicitly connect. Access is read-only for every channel — CGW never writes to, modifies, or takes action within any connected platform.

Shopify

Orders — order totals, line items, financial status, fulfillment status, timestamps, and associated customer identifiers. Full order history is accessed (including orders older than 60 days) to support cohort analysis and lifetime value calculations.
Customers — customer identifiers, email addresses, and order counts. Email addresses are used solely to identify repeat customers across orders (cohort stitching) and are never used for marketing or shared with third parties.
Products — product IDs, titles, and inventory data used to validate order line items.
Fulfillments and inventory — fulfillment events used to validate order completion status.

CGW does not access payment card data or passwords via Shopify.

Klaviyo

Campaign and flow data — campaign/flow names, send and engagement metrics (opens, clicks, conversions), and configuration used to analyze email/SMS performance.
Profile and segment data — subscriber email addresses, engagement history, and segment/list membership, used to analyze audience behavior and cross-reference with order data.

Klaviyo data is used solely to provide analytics back to you. CGW does not send campaigns, modify flows, or contact your subscribers.

Meta (Facebook/Instagram Ads)

Ad account data — campaign, ad set, and ad-level configuration, spend, and performance metrics.
Audience data — aggregate audience/targeting configuration used to analyze ad performance. CGW does not access or store individually identifiable customer-match data beyond what Meta’s reporting API exposes in aggregate.

Google Analytics 4 (GA4)

Site analytics data — sessions, traffic sources, channel groupings, conversion events, and e-commerce metrics used to analyze website and marketing performance.

Google Ads

Campaign data — campaign, ad group, and keyword-level spend, performance, and conversion data.

You control which data sources are connected. Connecting a channel is always optional and can be revoked at any time (see Section 7).

3. How We Use Your Data

Data accessed from your store is used exclusively to provide CGW’s analytics and reporting service to you. Specifically:

Order and customer data is ingested into a Google BigQuery dataset associated with your store and used to generate analytics reports, quality checks, and strategic briefings.
AI-generated summaries are produced using Anthropic’s Claude API. Data submitted to Claude is governed by Anthropic’s API usage policies. Your store data is never used to train any AI or machine learning model, by ZDS Ventures LLC or by Anthropic under our API agreement.
Data is never sold, rented, or shared with third parties for any purpose other than operating the service (see Section 4).
Data is never used for advertising, profiling, or any purpose beyond providing you with analytics for your own store.

4. Third-Party Services

CGW connects to the following external platforms as data sources, based on which channels you choose to connect:

Shopify
Klaviyo
Meta (Facebook/Instagram Ads)
Google Analytics 4
Google Ads

Each of these platforms has its own privacy policy governing how it handles the underlying data before CGW accesses it; this policy covers only what CGW does with data once accessed.

CGW uses the following infrastructure to operate. Each acts as a data processor on our behalf:

Google Cloud Platform (BigQuery, Cloud Run, Secret Manager) — your data is stored in BigQuery in the United States (us-central1 region). Google’s data processing terms apply.
Anthropic (Claude API) — QC results and derived analysis (not raw customer records) are submitted to Anthropic’s API to generate plain-English summaries. Anthropic does not retain API inputs for training purposes under our enterprise agreement.
Airbyte — used to sync data from connected sources to BigQuery. Airbyte operates as a pass-through and does not store your data independently.

No other third parties have access to your data.

5. Data Storage and Security

All data is stored in Google BigQuery in the United States.
Data is encrypted in transit (TLS) and at rest (Google-managed encryption).
Access tokens and API credentials for every connected channel — Shopify, Klaviyo, Meta, GA4, and Google Ads — are stored in Google Secret Manager and are never logged or exposed.
Access to your data is restricted to CGW’s production systems. No human reviews your raw data except to investigate technical issues, and only with your consent.

6. Security Incident Response

In the event of a security incident involving merchant or customer data, ZDS Ventures LLC will:

Investigate and work to contain the incident within 24 hours of discovery.
Notify affected merchants via email within 72 hours if their data was compromised.
Take corrective action to prevent recurrence and document the incident and response.

To report a suspected security issue, contact me@zekeds.com immediately.

7. Data Retention and Deletion

Your data is retained for as long as the associated channel remains connected to CGW.

Shopify

CGW receives a shop/redact webhook from Shopify within 48 hours of uninstallation.
All BigQuery datasets associated with your store are deleted within 48 hours of receiving this webhook.
Your Shopify access token is deleted from Secret Manager within 48 hours of uninstallation.

Klaviyo, Meta, GA4, and Google Ads

Disconnecting any of these channels (via that platform’s own settings, or by revoking CGW’s access) immediately invalidates CGW’s stored access token or credential for that channel.
Data already ingested from a disconnected channel is deleted from CGW’s systems within 30 days of disconnection, or immediately upon request to me@zekeds.com.

If you wish to request deletion of any of your data before these periods, contact me@zekeds.com and we will process the deletion promptly.

8. Customer Data (Your Customers)

CGW accesses data about your customers and subscribers (such as email addresses, order histories, and engagement data) via the channels you connect, in order to provide analytics to you. CGW does not contact your customers or subscribers directly, does not use their data for any purpose other than providing analytics to you, and does not share their data with any third party except as described in Section 4.

If one of your customers requests deletion of their data from your store, CGW will delete their associated records from our systems upon receiving the applicable Shopify GDPR webhook. For customer/subscriber data received via Klaviyo, Meta, GA4, or Google Ads, CGW will delete associated records upon your request or upon disconnection of the relevant channel, per Section 7. If you receive a customer data deletion request through any channel, you can also contact us directly at me@zekeds.com and we will process it across all connected systems.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal data we hold about you or your store. To exercise any of these rights, contact me@zekeds.com. We will respond within 30 days.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

ZDS Ventures LLC
Palo Alto, CA, United States
me@zekeds.com