Privacy Policy

Last updated: 31 May 2026

1. Who we are

Skurai is a Shopify app developed by E Design Hub, a sole trader based in England and Wales. Once installed from the Shopify App Store, Skurai reads your store's inventory data and generates per-SKU Push, Hold or Pull Back budget recommendations. Across your connected ad platforms (Meta, Google, TikTok, Pinterest and Microsoft Ads) it reads ad spend to track performance and surfaces a recommended budget change per SKU for you to action. Skurai does not change your ad budgets automatically.

When this policy refers to "Skurai", "we", "us" or "our", it means E Design Hub acting as data controller for the data described below.

Questions? Email privacy@skurai.com.

2. What data we collect

  • Shopify store data — your product catalogue, variant details, stock levels, inventory locations, and sales velocity, accessed via the Shopify API using the OAuth permissions you grant at install.
  • Ad platform credentials — OAuth tokens and account identifiers for each ad platform you connect (Meta, Google, TikTok, Pinterest and/or Microsoft Ads). We store only what is required to read your campaign spend and, where you have enabled it, apply the budget changes you approve.
  • App configuration — your signal threshold settings, manual overrides, and dashboard activity, used to operate and improve the app.
  • Contact email — if you join the early-access waitlist at skurai.com before launch, we collect your email address solely to notify you when the app is available to install.

We do not collect payment card information. Shopify handles all billing for the app subscription.

3. How we use your data

  • Signal generation — to analyse each SKU's stock cover, sales velocity, contribution margin and ad return, measured against the thresholds you configure, and produce a Push, Hold or Pull Back signal.
  • Ad performance tracking — to read ad spend from your connected ad platforms (Meta, Google, TikTok, Pinterest and Microsoft Ads) via their official APIs, to track performance and generate per-SKU budget recommendations.
  • App operation — to store your threshold configurations and display your signal dashboard.
  • Product improvement — to identify issues and improve the app experience, using anonymised, aggregated data only.
  • Waitlist notification — to send a single email when Skurai is available to install from the Shopify App Store.
  • Third-party platform compliance — all use of data obtained via Meta, Google, TikTok, Pinterest and Microsoft Ads APIs is strictly limited to operating the Skurai service and complies with the respective platform terms: Meta Platform Terms, Google API Services User Data Policy, TikTok for Business API Terms, Pinterest Developer Terms, and Microsoft Advertising API Terms of Service. We do not use ad platform data for surveillance, tracking individuals, building profiles outside the app context, or any purpose beyond delivering the Skurai service.

We will never sell your data or use it for any purpose unrelated to operating Skurai.

4. Legal basis for processing

Under UK GDPR and the Data Protection Act 2018, we rely on the following lawful bases:

  • Contractual performance — for processing your Shopify store data and ad platform credentials to deliver the Skurai service you have installed and subscribed to.
  • Consent — for sending the waitlist launch notification email. You provide consent by submitting your email address via the sign-up form.
  • Legitimate interests — for collecting anonymised, aggregated analytics to improve the app, where our interests are not overridden by your rights.

5. How long we keep your data

App data — retained for as long as your Skurai subscription is active. On uninstall or cancellation, your store data, ad platform credentials and threshold settings are deleted within 30 days. A 30-day recovery window is maintained in case of accidental uninstall.

Waitlist emails — retained until the launch notification is sent or you unsubscribe, then deleted within 30 days.

Aggregated analytics — retained in anonymised form indefinitely; no personally identifiable data is retained beyond the periods above.

6. Who we share your data with

We share data only to the extent necessary to operate the Skurai app:

  • Shopify Inc. — Skurai operates on the Shopify platform. Your store data is accessed via Shopify's API under the permissions you grant at install. See shopify.com/legal/privacy.
  • Meta Platforms, Inc. — if you connect Meta Ads, Skurai reads your campaign spend via Meta's Marketing API to track performance.
  • Google LLC — if you connect Google Ads, Skurai reads your campaign spend via the Google Ads API to track performance.
  • ByteDance Ltd (TikTok for Business) — if you connect TikTok for Business, Skurai reads your campaign spend via TikTok's Marketing API to track performance.
  • Pinterest, Inc. — if you connect Pinterest Ads, Skurai reads your campaign spend via Pinterest's API for Advertisers to track performance.
  • Microsoft Corporation — if you connect Microsoft Ads, Skurai reads your campaign spend via the Microsoft Advertising API to track performance.

We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties for their own purposes.

7. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data. For app users this means deletion of your store data, credentials and configuration from our systems.
  • Withdraw consent — unsubscribe from the waitlist at any time; your email will be deleted from our records.
  • Restriction — ask us to restrict processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@skurai.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7a. Data deletion requests

If you wish to request deletion of your data — including any data Skurai has accessed via Meta, Google, TikTok, Pinterest or Microsoft Ads OAuth — you may do so by:

  • Email: sending a deletion request to privacy@skurai.com with the subject line "Data Deletion Request"
  • Uninstalling the app: uninstalling Skurai from your Shopify admin automatically triggers deletion of all your store data, ad platform credentials and configuration within 30 days

We will confirm deletion by email within 30 days of receiving your request. This applies to all data held across our systems including our database, backups, and any cached data.

8. Cookies

The Skurai app uses session cookies strictly necessary to maintain your authenticated session inside the Shopify Admin. These are managed by Shopify's embedded app framework and are exempt from consent requirements under UK GDPR as they are essential to the service.

The skurai.com website does not set any first-party analytics or tracking cookies.

9. International transfers

Our sub-processors operate infrastructure primarily in the United States and Canada. Where your data is transferred outside the UK, it is protected by Standard Contractual Clauses (SCCs) approved by the UK ICO under the International Data Transfer Agreement (IDTA) framework. This applies to Shopify Inc., Meta Platforms Inc., Google LLC, ByteDance Ltd, Pinterest Inc., and Microsoft Corporation.

10. Changes to this policy

We may update this policy from time to time. We will notify waitlist members and active app users of material changes by email. The "last updated" date at the top of this page always reflects the current version.

Continued use of the Skurai app after changes are published constitutes acceptance of the updated policy.

11. Data access and the changes we make

Skurai reads the Shopify data it needs to generate signals: your product catalogue and variant details, inventory and stock levels, fulfilment locations, and order history for sales velocity. The only change Skurai makes to your Shopify store is updating product variant data when you use its in-app variant tools — it does not modify your orders or customer data.

For your connected ad platforms, Skurai reads campaign spend to track performance and, where you have enabled it, applies the budget changes you approve. It does not share your Shopify inventory, product or sales data with any ad platform.