Your data should be understandable and controllable.

This policy explains how Parsora accesses, uses, stores and deletes information when you sign in, connect analytics sources or a Shopify store, and use Parsora.

Effective 8 October 2026 — Shopify service

Your controls: Parsora requests read-only Google Analytics access. It cannot change your GA4 configuration. You can disconnect Google Analytics without deleting saved reviews, or delete your Parsora account and live-service data from Account.

Who we are Data we process Google user data Shopify data Product-quality research Retention & deletion Your choices

1. Who we are

Parsora is a business analytics service operated by Cihangir Analytics Consultancy Ltd., a company registered in England and Wales under company number 09597715, with registered office at 565 Green Lanes, Haringey, London, England, N8 0RL. In this policy, “Parsora”, “we”, “us” and “our” refer to Cihangir Analytics Consultancy Ltd.

For general enquiries, contact hello@parsora.ai. For support or help with your Parsora account, contact support@parsora.ai. You can also use the in-product Feedback control.

2. Information we process

Depending on how you use Parsora, we process:

Account information such as your name, email address and the verified Google or Shopify identity used to sign in. For Shopify sign-in, we verify your Shopify user ID and store-owner status. Each person has a separate Parsora user ID; matching email addresses do not automatically link accounts.
Google Analytics account and property information needed to show the GA4 properties you can access and to identify the property you choose.
Read-only Google Analytics reporting and configuration data needed to perform Data Health checks and generate Deep Dives, Parses, Explore views and PDFs.
Shopify store and reporting data as described in the Shopify section below, and plan status and billing-period information needed to provide paid features.
Parsora review data including selected business type/reach, generated findings, evidence, saved review snapshots and archived review PDFs.
Service events such as sign-in success/failure, property selection, review start/completion/failure, PDF export and safe diagnostic reason codes. We do not intentionally place OAuth tokens or raw secret values in these event records.
Feedback that you choose to submit, including review reactions and free-text feedback.

3. How we use Google user data

Parsora requests the Google Analytics read-only scope analytics.readonly, together with standard Google sign-in identity scopes. We use that access only to provide the features you request: listing accessible GA4 properties, checking data readiness and configuration, analysing performance, generating your Parsora review and supporting saved-report functionality.

Parsora does not use the Google Analytics connection to edit, create or delete your GA4 configuration. We do not sell Google user data or use it for advertising. Our use and transfer of information received from Google APIs is intended to comply with the Google API Services User Data Policy and its Limited Use requirements.

OAuth credentials stored by Parsora are encrypted by the application before persistence. You can revoke the connection from the Parsora Account page; Parsora will remove its stored Google credentials and attempt to revoke the Google OAuth grant.

Shopify sign-in and connected stores

When you choose Shopify sign-in, we use Shopify to verify your identity and show the store and account you are about to use. A new store owner can create a Parsora account and choose a Business. Existing Parsora users explicitly link their accounts. Shopify staff do not automatically become Parsora Business owners.

A connected store is identified by its Shopify Shop ID and domain, alongside its Parsora Business ID. We process store name, currency and time zone; order IDs, dates, status, totals, discounts, taxes and refunds; and product and line-item identifiers, titles, quantities and amounts. We use these records to calculate sales and product performance, check data quality and generate reports. Order records remain protected customer data even when they contain no customer contact fields.

Our reporting queries do not request customer names, email addresses, telephone numbers or postal addresses. Merchant account identity is separate from shopper information. Shopify privacy notifications may include customer contact fields; our handler discards those fields and retains the identifiers needed to fulfil the request. We request read access to orders, products, inventory and minimal customer records and do not use it to edit your store. The history available depends on the permissions Shopify grants.

We also process dated inventory observations: product and variant references, SKU, tracking status, location identifiers, and available, on-hand, committed and incoming quantities. We use these to describe current stock coverage and availability. A snapshot does not establish historical stockouts or lost sales.

For customer analysis, we process a hashed Shopify customer identifier, record dates, lifetime order count and spend with currency, and Shopify customer groups or predicted spending tiers where available. The hash supports linking records and fulfilling privacy requests; hashed identifiers remain protected customer data. Lifetime summaries can cover a longer history than the order details available to Parsora. We keep missing customer statistics and unknown first/repeat order classifications explicit rather than treating them as zero. Order source and originating-app information provide channel context but do not by themselves verify a marketplace or first-ever acquisition source.

Our Shopify read scopes are read_orders, read_products, read_inventory and read_customers. We do not use these permissions to edit the store. Initial order collection stays within standard recent-order access; Parsora does not request older-order access during initial setup. Useful collected history and dated snapshots are retained to support ongoing analysis, subject to applicable deletion requests. The initial import window is not a rolling deletion limit.

We encrypt stored store-access credentials. Short-lived credentials used to verify Shopify sign-in are not persisted. We also keep store-link and permission records, and subscription status, plan identifier, billing period and trial information to verify feature access. Shopify handles Shopify plan approval and payment; this integration does not collect payment-card details.

Disconnecting or uninstalling stops further collection through that connection and invalidates its Parsora access. It does not by itself delete your separate Parsora account or every saved report. We process Shopify customer and shop deletion notifications to erase the affected stored data. Reports containing affected data may be removed rather than retained as permanent snapshots. Shopify customer-data requests are made available for authorised merchant export and require a confirmed delivery step; we do not automatically email customer data.

We retain limited request identifiers, hashes and outcomes to record deletion and prevent erased data from being restored or collected again. Our restore procedure reapplies recorded erasures before restored data is made available. Copies already downloaded or delivered outside Parsora are outside our direct control. For access or deletion help, contact support@parsora.ai.

4. Why we process the data

To authenticate you and provide the Parsora service you request.
To generate, save and export your Deep Dive and related evidence.
To protect the service, prevent abuse, enforce the free Deep Dive entitlement and diagnose failures.
To respond to feedback and support requests.
Where you separately opt in, to perform manual product-quality review as described below.

5. Optional manual product-quality research

Parsora may offer an optional checkbox before a free Deep Dive asking whether the Parsora team may manually review that Deep Dive and its archived PDF for product-quality research. This is opt-in. Leaving the checkbox unticked does not affect your review or access to Parsora.

We do not treat use of the service alone as permission for manual product-research inspection of an individual customer's report. Limited operational access may still occur where reasonably necessary for security, abuse prevention, support requested by you, or legal obligations.

We use cloud and technology service providers to host and operate Parsora. They may process information on our behalf under appropriate service arrangements. We may also disclose information where required by law, to protect users or the service, or as part of a lawful business reorganisation. We do not sell Google user data.

7. Retention, disconnecting and deletion

Saved reviews, review snapshots, archived PDFs, feedback and service records are retained while your Parsora account remains active unless we remove them earlier for operational, security or legal reasons. When you use Delete Parsora account & data, Parsora removes the account and associated live-service records that the product identifies for deletion.

Disconnecting a source removes or invalidates its stored credentials but is different from deleting the Business and its saved history. For Shopify, useful canonical history and saved reports remain for the active Business's reporting purpose, subject to erasure and review of continuing need. Completed temporary collection pages become eligible for cleanup after seven days; failed or cancelled collection payloads after 30 days without job or page activity. Active recovery and unresolved privacy requests are held until resolved. Scheduled maintenance processes bounded batches.

Automatic database backups retain seven successful copies, and point-in-time recovery logs retain seven days. Manual recovery backups have a normal maximum age of 30 days, managed by a dated operator review, with a named owner, reason and expiry required for any necessary exception. They do not expire automatically at the provider. Backup copies are isolated from ordinary use after live deletion; recorded erasures must be reapplied and checked before a restore is returned to service. Limited suppression records remain while needed to prevent restoration or recollection. The Shopify Merchant Data Processing Agreement describes processing responsibilities, subprocessors, assistance and return or deletion.

8. Security

We use technical and organisational measures designed to protect account credentials and stored review data, including encrypted credential storage, HTTPS and access controls. No internet service can guarantee absolute security.

9. Your choices and rights

You can sign out, disconnect connected sources, request account and data deletion, choose whether to opt in to manual product-quality review, and choose whether to submit feedback. Depending on where you live, privacy law may give you additional rights such as access, correction, deletion, restriction or objection. Contact us if you want to exercise a right that is not available directly in the product.

10. International processing

Parsora and its service providers may process information in countries other than the country where you are located. Where applicable, we take steps intended to support lawful international transfers.

11. Contact and legal operator

The legal operator of Parsora is Cihangir Analytics Consultancy Ltd., company number 09597715, registered in England and Wales. Registered office: 565 Green Lanes, Haringey, London, England, N8 0RL.

General enquiries: hello@parsora.ai. Support: support@parsora.ai.

12. Changes to this policy

We may update this policy as Parsora develops. We will update the effective date and, where appropriate, provide additional notice for material changes.

Optional connected sources

Optional Google Search Console and Google Ads connections are authorised separately for each business. Search Console uses read-only access. Google Ads uses Google’s standard Ads permission, which includes write capabilities; Parsora uses it only to read performance, conversion and campaign-configuration data and does not modify campaigns or budgets. Connected-source reports, selected accounts and sites, and connection credentials are processed to provide the analysis. You can disconnect each source in Business settings.