PRIVACY POLICY

Last Updated: 20th October 2026.

1. INTRODUCTION

This Privacy Policy explains how Connily Marketing Management L.L.C ("Connily," "we," "us," or "our"), a limited liability company registered in the United Arab Emirates, collects, uses, stores, and protects your personal information when you use our platform, including our website at https://www.connily.com, our application at https://app.connily.com, our Shopify application, our connector for AI assistants such as ChatGPT and Claude, and any related services (collectively, the "Service").

Our registered address is:

Connily Marketing Management L.L.C

Tanvi Business Center

Dubai, United Arab Emirates

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices described in this policy, please do not use the Service.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above and, where appropriate, providing additional notice via email or through the Service.

2. INFORMATION WE COLLECT

Information You Provide Directly

When you create an account or use the Service, we collect information you provide, including:

Account Information: Your name, email address, and password.
Business Information: Your brand name, business details, and onboarding preferences you provide during setup.
Support Communications: Any information you share when you contact us for support or provide feedback.

Information Collected Through Third-Party Integrations

When you connect third-party accounts to the Service, we access and store data necessary to provide the Service:

Shopify and WooCommerce: Store name, product catalogue data (product titles, descriptions, images, SKUs, pricing, inventory status, collections), order analytics and performance data, and store configuration details. We access this data through the store platform's APIs using secure authentication tokens. We do not access or store personal data of your end customers (shoppers).
Instagram: Account identifiers, profile information, content you create or approve through the Service, and post performance analytics.
Facebook: Page identifiers, profile information, content you create or approve through the Service, and post performance analytics.

We store OAuth tokens for these integrations solely for authentication purposes.

Information Collected Automatically

When you use the Service, we automatically collect:

Usage Data: Pages visited, features used, actions taken within the Service, and interaction patterns.
Technical Data: IP address, browser type and version, device type, operating system, and referring URLs.
Cookie Data: Information collected through cookies and similar tracking technologies (see Section 5 below).

Payment Information

Payment details are collected and processed directly by our third-party payment processors (Stripe and Shopify Payments). We do not directly access, process, or store your full payment card details. We may receive limited transaction information such as the last four digits of your card and billing address for record-keeping purposes.

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

Providing the Service: To operate, maintain, and deliver the features of the Service, including AI-powered content generation, scheduling, publishing, and analytics.
AI Processing: To process your connected store data, analytics, and content briefs through artificial intelligence in order to generate content suggestions, recommendations, and performance insights. AI processing is performed using data you provide or that is accessed through your connected integrations.
Account Management: To create and manage your account, process subscriptions, and handle billing through our payment processors.
Communications: To send you service-related notifications, updates, support responses, and (where you have opted in) marketing communications via our email provider, Resend.
Improvement and Analytics: To analyse usage patterns, diagnose technical issues, and improve the Service.
Security: To detect, prevent, and address fraud, abuse, and security issues.
Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

We do not sell your personal information.

4. HOW WE SHARE YOUR INFORMATION

We share your information only in the following circumstances:

Third-Party Service Providers

We use the following third-party services that may process your data on our behalf:

Supabase, Vercel and Railway: Application hosting, database and file storage
Stripe: Payment processing
Shopify and WooCommerce: E-commerce integration, and payment processing for Shopify App users
Resend: Email communications
Google Analytics: Website analytics and usage tracking
Meta (Facebook/Instagram) and Pathfix: Social media and store connections, and content publishing
AI model providers: Generating images and text, and checking the quality of content. Your product photos, brand profile and content briefs are sent to these providers only to create and check your content.

Each of these services processes data in accordance with their own privacy policies.

Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Connily in AI Assistants

You can connect your Connily account to an AI assistant, such as ChatGPT or Claude, and ask it to work with Connily for you. You choose to connect, you sign in with your Connily account, and you can disconnect at any time in Connily or in the assistant.

What the assistant sends to Connily: the requests you make through it, such as what you want a post to say, the products and posts you pick, captions, feedback and instructions, and files you upload in Connily's cards. Connily does not ask for or receive your conversation history.

What Connily returns to the assistant: only the information needed to answer your request, from your Connily account. This covers your account and plan, connected accounts and their status, brand profile, product catalogue, posts, results (including store revenue and orders tracked to Instagram and Facebook, as totals only, with no information about your customers), posting settings and recent activity in Connily.

The assistant's provider processes this under its own privacy policy (for ChatGPT, OpenAI's; for Claude, Anthropic's). Connily does not control how the provider stores or uses it.

What Connily records: each request made through an assistant (which tool, when, from which assistant, and whether it worked) and interactions with Connily's cards, to run, secure and improve the Service. These records are kept for up to 12 months, in line with Section 7. Sign-in tokens are stored only in hashed form.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies on our website and application.

Types of Cookies We Use

Essential Cookies: Required for the Service to function, including session management and authentication. These cannot be disabled.
Analytics Cookies: Used through Google Analytics to understand how visitors interact with our website, helping us improve the Service.
Functionality Cookies: Used to remember your preferences and settings within the Service.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from using certain features of the Service.

6. DATA STORAGE, TRANSFER, AND SECURITY

Data Storage

Your data is stored in a database and file storage hosted by Supabase, on Amazon Web Services (AWS) infrastructure located in the United States. The Service runs on application servers hosted by Vercel and Railway.

International Data Transfers

As our servers are located in the United States and we operate from the United Arab Emirates, your data may be transferred to and processed in countries outside your country of residence, including the United States and the UAE. These countries may have data protection laws that differ from those in your jurisdiction.

For users in the European Economic Area (EEA) or United Kingdom (UK), we ensure that appropriate safeguards are in place for international transfers, such as standard contractual clauses or other legally recognised transfer mechanisms.

By using the Service, you consent to the transfer of your data to these locations as described in this policy.

Data Security

We implement reasonable technical and organisational measures to protect your personal information, including:

Encryption of data in transit using SSL/TLS
Secure authentication via OAuth for third-party integrations
Access controls to limit who can access personal data
Regular review of our data collection, storage, and processing practices

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

Account Data: Retained for the duration of your account and for up to 90 days after account deletion to allow for account recovery and to resolve any outstanding issues.
Analytics and Performance Data: Retained for the duration of your account to power AI recommendations and historical reporting.
Payment Records: Retained as required by applicable tax and financial regulations.
Technical Logs: Retained for up to 12 months for security and troubleshooting purposes.

After the applicable retention period, we will delete or anonymise your data, unless a longer retention period is required by law.

When you uninstall the Connily Shopify app, we receive a data deletion webhook from Shopify and will delete your store data in accordance with Shopify's requirements.

8. YOUR RIGHTS

All Users

Regardless of your location, you may:

Access your personal data by contacting us
Update your account information through your account settings
Delete your account by contacting us or through your account settings
Opt out of marketing communications by using the unsubscribe link in any marketing email or by contacting us

European Economic Area and United Kingdom Users (GDPR)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data in certain circumstances.
Right to Restrict Processing: Request that we restrict the processing of your personal data.
Right to Data Portability: Request to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object: Object to the processing of your personal data for certain purposes, including direct marketing.
Right to Withdraw Consent: Where we rely on your consent, you may withdraw it at any time.

Legal Basis for Processing:

We process your personal data on the following legal bases:

Contract: Processing necessary to perform our contract with you (providing the Service).
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, fraud prevention, and analytics.
Consent: Where you have given consent for specific processing activities, such as marketing communications.
Legal Obligation: Processing necessary to comply with applicable laws.

California Users (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request information about the categories and specific pieces of personal information we have collected, the sources, our purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out: Opt out of the "sale" of your personal information. We do not sell personal information in the traditional sense, but certain data sharing activities may constitute a "sale" under the CCPA's broad definition.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Exercising Your Rights

To exercise any of these rights, please contact us at team@connily.com. We will respond to your request within the timeframes required by applicable law (generally within 30 days). We may need to verify your identity before processing your request.

9. CHILDREN'S PRIVACY

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at team@connily.com.

10. THIRD-PARTY LINKS AND SERVICES

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Updating the "Last Updated" date at the top of this policy
Sending an email notification for significant changes
Providing a notice within the Service

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Connily Marketing Management L.L.C

Tanvi Business Center

Dubai, United Arab Emirates

Email: team@connily.com

For data protection inquiries, complaints, or to exercise your rights, please email team@connily.com with the subject line "Privacy Request."

If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.

‍