Privacy Policy

This Privacy Policy explains how Fornax Ventures LLP (“we”, “us”, or “our”) collects, uses, discloses, and protects information in connection with our SaaS platform (the “Service”) that provides e-commerce analytics by connecting to third-party platforms such as Shopify and Google Analytics (GA4), and other integrations. This Policy applies to information collected through our website, the Service, and related communications.

1. Controller & Contact

Data controller: Fornax Ventures LLP
Privacy contact: dev@ocular.dev
For questions about this Policy or to exercise your rights, please contact the address above.

2. What information we collect

We collect the following categories of data to provide analytics and reporting services:

• Account & contact information — name, email, company name, billing contact, role and any credentials you provide when creating an account.
• Connected platform data — data imported from connected platforms (for example Shopify, GA4, ad platforms, payment processors). This may include store metadata, order and transaction details, product catalog, customer records, customer identifiers (email, customer ID), shipping & billing addresses, refunds, coupons, subscription statuses, event-level analytics and event parameters provided by GA4. We only access scopes you authorize.
• Usage & technical data — logs, IP address, device and browser information, cookies and similar tracking data, and Service usage metrics.
• Aggregated & derived data — aggregated, de-identified, or derived analytics we produce from the data you provide (e.g., cohort definitions, revenue attribution summaries).
• Payment & billing data — billing name, billing address, payment method metadata processed via our payment processor (we do not store full card numbers).

3. How we collect data

• You provide account and billing info when signing up.
• You connect third-party services (Shopify, GA4, advertising platforms) via OAuth or API keys — we import the data necessary to provide analytics.
• We collect usage data automatically when you use the Service (logs, cookies).

4. How we use personal data

We use personal data to:

• Provide, operate, maintain, and improve the Service (including analytics, dashboards, and reporting).
• Authenticate and administer accounts and process payments.
• Communicate with you about Service updates, security notices, and billing.
• Detect and prevent fraud, abuse, and security incidents.
• Perform research and product development using aggregated/de-identified data.
• Comply with legal obligations and respond to lawful requests.

5. Connectors & third-party platforms (Shopify, GA4, etc.)

When you connect a third-party service:

• You authorize us to access data via the APIs/scopes you approve. We request the minimum scopes needed to deliver the Service.
• Connected-platform data may contain personal data about your customers (orders, emails, addresses). You remain the controller of your customers’ personal data; we act as a processor on your behalf. You must ensure you have the lawful basis or permission required to share that data with us.
• You can revoke the connection at any time via the third-party platform or our app settings; revoking may limit our ability to provide the Service.

6. Data retention & deletion

• We retain your account and connected data for as long as your account is active or as needed to provide the Service.
• After account termination or prolonged inactivity, we will retain backup copies for a limited period for fraud prevention, legal compliance, or legitimate business needs.
• You may request deletion of your account and associated data by contacting dev@ocular.dev. We will remove personal data unless retention is required by law or necessary for legitimate business purposes; if we cannot delete certain information we will notify you.

7. Your rights and access

If you would like access to, correction of, or deletion of your personal data that we hold, or to request a copy of your data in a portable format, contact dev@ocular.dev. We may require verification of identity before fulfilling requests.

8. Security

We implement industry-standard technical and organizational measures to protect personal data, including:

• Encryption in transit (SSL/TLS) and encryption at rest where feasible.
• Access controls, role-based permissions, and logging.
• Regular backups and incident response procedures.
• Security reviews and audits.

9. International data transfers

Your data may be processed or stored in countries other than where you or your customers reside. We take reasonable measures to protect data when transferred internationally and will use appropriate safeguards where required.

10. Cookies & tracking

We and our partners use cookies, local storage and similar technologies for functionality, analytics, and marketing. You can manage cookie preferences via our cookie banner/settings. See our Cookie Notice for details on specific technologies and opt-out options.

11. Data Processing Agreement (DPA)

We will enter into a Data Processing Agreement upon request for enterprise customers. The DPA will specify subprocessors, security obligations, data subject request procedures, and transfer safeguards. The DPA is available upon request and is incorporated into our Terms of Service for customers who sign it.

12. Law enforcement & legal compliance

We may disclose data to law enforcement, courts, or regulators where required by law or necessary to protect our rights, property, or safety, or the rights and safety of others.

13. Marketing & communications

We may contact you with product updates, marketing materials, and service announcements if you have consented or where permitted by law. You can opt out of marketing emails by following the unsubscribe link in those messages or by contacting dev@ocular.dev.

14. Changes to this policy

We may update this Policy from time to time. Material changes will be notified via our Service or by email with the revised effective date.

15. How to contact us

Privacy contact: dev@ocular.dev
If we are unable to resolve your complaint, you may have the right to raise concerns with local authorities as applicable.

‍

‍