Privacy Policy

1. Introduction

OceanaCDP ("we," "our," or "us") is a Customer Data Platform operated by Oceana Marketing LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our application through Shopify or our website at oceanacdp.com.

By using OceanaCDP, you consent to the data practices described in this policy.

2. Information We Collect

When you connect your Shopify store to OceanaCDP, we collect the following data to provide our services:

Customer Data from Your Shopify Store:

• Contact Information: Customer names and email addresses
• Location Data: City, state/province, and ZIP/postal code from billing addresses
• Transaction Data: Order dates, order amounts, and products purchased
• Behavioral Data: Traffic source, landing pages, and device type

Data We Do NOT Collect:

• Phone numbers
• Full street addresses
• Payment card information
• Passwords or sensitive authentication details

Account Information:

• Your email address and name when you create an account
• Your Shopify store URL

3. How We Use Your Information

We use the collected information for the following purposes:

• Customer Segmentation: Grouping customers by behavior, location, and purchase patterns
• Analytics: Calculating customer lifetime value, repeat purchase rates, and engagement scores
• Demographic Insights: Estimating customer demographics based on publicly available data
• Marketing Support: Enabling targeted marketing campaigns through customer segments
• Service Improvement: Improving our platform and developing new features

4. Data Processing and Enrichment

We process customer data to provide enhanced insights:

• Gender Estimation: We may estimate customer gender based on first names using statistical analysis
• Age Group Estimation: We may estimate age demographics based on ZIP code population data
• Engagement Scoring: We calculate engagement scores based on purchase frequency and order values

These estimations are statistical approximations and may not reflect actual individual characteristics.

5. Data Sharing and Disclosure

We do not sell, trade, or rent customer personal information to third parties.

We may share data in the following circumstances:

• With Your Consent: When you explicitly authorize sharing
• Service Providers: With trusted third-party services that help us operate our platform (e.g., hosting, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Encryption at Rest: Sensitive credentials (such as Shopify access tokens) are encrypted using Fernet symmetric encryption
• Access Controls: User data is isolated and accessible only to the respective account owner
• Secure Authentication: We use OAuth 2.0 for secure Shopify store connections

7. Data Retention

We retain customer data for as long as your account is active or as needed to provide our services. Data is automatically updated during regular synchronization cycles.

Upon account termination or request, we will delete your data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Opt-Out: Opt out of certain data processing activities

To exercise these rights, contact us at privacy@oceanacdp.com

9. Shopify Merchants

If you are a Shopify merchant using OceanaCDP:

• You are the data controller for your customers' personal data
• We act as a data processor on your behalf
• You are responsible for ensuring you have appropriate legal basis to share customer data with us
• You should inform your customers about data sharing through your own privacy policy

10. International Data Transfers

Your data may be transferred to and processed in the United States. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@oceanacdp.com
• Company: Oceana Marketing LLC
• Website: oceanacdp.com