Privacy Policy

Last updated: 19 May 2026

1. Who we are

Skurai is a Shopify app developed by E Design Hub, a sole trader based in England and Wales. Once installed from the Shopify App Store, Skurai reads your store's inventory data and automatically dispatches Push, Hold or Pull Back budget signals to your connected ad platforms (Meta, Google, TikTok and Pinterest).

When this policy refers to "Skurai", "we", "us" or "our", it means E Design Hub acting as data controller for the data described below.

Questions? Email privacy@skurai.com.

2. What data we collect

  • Shopify store data — your product catalogue, variant details, stock levels, inventory locations, and sales velocity, accessed via the Shopify API using the OAuth permissions you grant at install.
  • Ad platform credentials — OAuth tokens and account identifiers for each ad platform you connect (Meta, Google, TikTok, Pinterest). We store only what is required to dispatch signals on your behalf.
  • App configuration — your signal threshold settings, manual overrides, and dashboard activity, used to operate and improve the app.
  • Contact email — if you join the early-access waitlist at skurai.com before launch, we collect your email address solely to notify you when the app is available to install.

We do not collect payment card information. Shopify handles all billing for the app subscription.

3. How we use your data

  • Signal generation — to analyse each SKU's stock level, sales velocity, contribution margin and supplier lead time and produce a Push, Hold or Pull Back signal.
  • Signal dispatch — to send budget adjustment instructions to your connected ad platforms via their official marketing APIs.
  • App operation — to store your threshold configurations and display your signal dashboard.
  • Product improvement — to identify issues and improve the app experience, using anonymised, aggregated data only.
  • Waitlist notification — to send a single email when Skurai is available to install from the Shopify App Store.

We will never sell your data or use it for any purpose unrelated to operating Skurai.

4. Legal basis for processing

Under UK GDPR and the Data Protection Act 2018, we rely on the following lawful bases:

  • Contractual performance — for processing your Shopify store data and ad platform credentials to deliver the Skurai service you have installed and subscribed to.
  • Consent — for sending the waitlist launch notification email. You provide consent by submitting your email address via the sign-up form.
  • Legitimate interests — for collecting anonymised, aggregated analytics to improve the app, where our interests are not overridden by your rights.

5. How long we keep your data

App data — retained for as long as your Skurai subscription is active. On uninstall or cancellation, your store data, ad platform credentials and threshold settings are deleted within 30 days. A 30-day recovery window is maintained in case of accidental uninstall.

Waitlist emails — retained until the launch notification is sent or you unsubscribe, then deleted within 30 days.

Aggregated analytics — retained in anonymised form indefinitely; no personally identifiable data is retained beyond the periods above.

6. Who we share your data with

We share data only to the extent necessary to operate the Skurai app:

  • Shopify Inc. — Skurai operates on the Shopify platform. Your store data is accessed via Shopify's API under the permissions you grant at install. See shopify.com/legal/privacy.
  • Meta Platforms, Inc. — if you connect Meta Ads, we send signal instructions via Meta's Marketing API.
  • Google LLC — if you connect Google Ads, we send signal instructions via the Google Ads API.
  • ByteDance Ltd (TikTok for Business) — if you connect TikTok for Business, we send signal instructions via TikTok's Marketing API.
  • Pinterest, Inc. — if you connect Pinterest Ads, we send signal instructions via Pinterest's API for Advertisers.

We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties for their own purposes.

7. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data. For app users this means deletion of your store data, credentials and configuration from our systems.
  • Withdraw consent — unsubscribe from the waitlist at any time; your email will be deleted from our records.
  • Restriction — ask us to restrict processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@skurai.com. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

The Skurai app uses session cookies strictly necessary to maintain your authenticated session inside the Shopify Admin. These are managed by Shopify's embedded app framework and are exempt from consent requirements under UK GDPR as they are essential to the service.

The skurai.com website does not set any first-party analytics or tracking cookies.

9. International transfers

Our sub-processors operate infrastructure primarily in the United States and Canada. Where your data is transferred outside the UK, it is protected by Standard Contractual Clauses (SCCs) approved by the UK ICO under the International Data Transfer Agreement (IDTA) framework. This applies to Shopify Inc., Meta Platforms Inc., Google LLC, ByteDance Ltd, and Pinterest Inc.

10. Changes to this policy

We may update this policy from time to time. We will notify waitlist members and active app users of material changes by email. The "last updated" date at the top of this page always reflects the current version.

Continued use of the Skurai app after changes are published constitutes acceptance of the updated policy.