Privacy Policy
Last updated: May 2026
This Privacy Policy explains how SalesLeak collects, uses, stores and protects personal data.
SalesLeak operates as both:
- A Data Controller for merchant account information.
- A Data Processor for shopper information collected on behalf of merchants through the SalesLeak platform, Shopify app, WooCommerce plugin, WordPress plugin and related integrations.
1. Who We Are
SalesLeak is an ecommerce intelligence platform that helps merchants identify buying frictions, uncover revenue leakage and understand why shoppers leave without purchasing.
If you have any questions about this Privacy Policy, contact:
2. Data We Collect
Merchant Account Data (Data We Control)
We may collect:
- Name
- Email address
- Company name
- Store name
- Store URL
- Account settings and preferences
- Subscription and billing information
- Usage and activity data
- Support communications
Payment information is processed by Stripe. SalesLeak does not store full payment card details.
Merchant Store Data
When a merchant installs SalesLeak through Shopify, WooCommerce, WordPress or other supported platforms, we may collect:
- Store domain
- Store configuration settings
- Widget configuration settings
- Product URLs associated with shopper responses
- Platform-specific identifiers necessary for integration
- Subscription and installation information
Shopper Data (Data We Process On Behalf Of Merchants)
When shoppers interact with SalesLeak widgets, we may process:
- Open-text responses
- Product page URLs
- Page location information
- Event timestamps
- Session identifiers
- Widget interaction events
SalesLeak is designed to minimise personal data collection.
Merchants are responsible for determining what information is requested from shoppers through their implementation of SalesLeak.
3. How We Use Data
Merchant Data
We use merchant data to:
- Provide and maintain SalesLeak services
- Authenticate users
- Process subscriptions and billing
- Provide customer support
- Send service-related communications
- Improve platform functionality
- Prevent abuse and maintain security
Shopper Data
We process shopper data on behalf of merchants to:
- Categorise responses into buying friction themes
- Identify trends and patterns
- Generate insights and recommendations
- Calculate estimated sales impact
- Display analytics and reports within SalesLeak
4. AI Processing
SalesLeak uses artificial intelligence technologies to analyse shopper responses and identify common friction themes.
Response content may be processed by AI providers solely for the purpose of delivering SalesLeak functionality.
SalesLeak does not use merchant or shopper data to train proprietary AI models.
5. Third-Party Services
SalesLeak uses trusted third-party providers that may process data on our behalf.
These may include:
- Stripe (Payments)
- OpenAI (AI Processing)
- Resend (Email Delivery)
- Google Analytics (Website Analytics)
- Hotjar (Behaviour Analytics)
- Supabase (Database Infrastructure)
- Vercel (Hosting Infrastructure)
- Cloudflare (Security and Performance)
Each provider processes data according to its own privacy policy and applicable contractual obligations.
6. Data Controller and Data Processor Responsibilities
For merchant account information, SalesLeak acts as the Data Controller.
For shopper information collected through merchant websites, SalesLeak acts as a Data Processor acting on behalf of the merchant.
Merchants are responsible for:
- Providing appropriate privacy notices
- Obtaining any required consents
- Complying with applicable privacy laws
- Responding to shopper privacy requests where legally required
7. Data Storage and Security
SalesLeak uses industry-standard technical and organisational safeguards to protect data.
These include:
- Encryption in transit (TLS/HTTPS)
- Access controls
- Authentication safeguards
- Infrastructure monitoring
- Restricted access to production systems
No method of transmission or storage can be guaranteed to be 100% secure.
8. International Data Transfers
SalesLeak and its service providers may process data in multiple countries, including the United States and other jurisdictions where our providers operate.
Where required, appropriate safeguards are used for international data transfers.
9. Data Retention
Merchant account data is generally retained while an account remains active and for a reasonable period afterward for legal, security and operational purposes.
Shopper response data follows the retention settings associated with the merchant account.
After applicable retention periods expire, data is deleted or anonymised.
10. Your Rights
Depending on your location, you may have rights including:
- Access
- Correction
- Deletion
- Restriction of processing
- Objection to processing
- Data portability
To exercise these rights, contact:
We will respond within a reasonable timeframe and in accordance with applicable law.
GDPR
If you are located in the European Economic Area or United Kingdom, you may have rights under the GDPR and may lodge a complaint with your local supervisory authority.
CCPA / CPRA
If you are a California resident, you may have rights under applicable California privacy laws, including rights relating to access, deletion and disclosure of personal information.
11. Cookies
Please review our Cookie Policy for information about cookies and similar technologies used by SalesLeak.
12. Children’s Privacy
SalesLeak is not intended for children under the age of 18 and we do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Material changes will be posted on this page and become effective when published.
14. Contact
For privacy-related questions:
Want a practical way to identify buying friction? Download our free 180 Buying Frictions Workbook to discover common reasons shoppers hesitate across product pages, carts, and checkout, along with ideas for fixing them.