Plainview · Privacy
Your store’s data, kept plainly.
Who we are
Plainview is a Shopify app made by That Other Agency Ltd, a company registered in England and Wales, company number 16799053, based in London. This policy covers Plainview. Our website has its own privacy notice.
When you use Plainview, you decide which store and which accounts it reads, and we use what it reads only to run Plainview for you. Your Shopify store’s customer data stays your responsibility as its controller, and Plainview keeps none of it. We are the controller for the few details about your business described below.
You can reach us at hello@thatotheragency.co.uk, or by post at our registered office address, which is listed on Companies House.
What Plainview reads and keeps
- From Shopify. With your permission to read orders, Plainview imports your last 60 days of orders when you install it, then picks up new and changed orders each time you open it. For each order it keeps Shopify’s ID for it, the date, net sales, discounts, refunds, units, and whether it was cancelled or a test. For each line it keeps the product title, quantity and net sales. It also keeps your store’s name, currency and time zone, and the access token Shopify gives Plainview to read your store.
- Never your customers’ details. Plainview does not keep customer names, email addresses, phone numbers, postal addresses or customer IDs.
- From the tools you connect (paid plan). From Meta Ads, Google Ads and TikTok Ads: daily spend, impressions, clicks, purchases and purchase value for the ad account you choose, the same figures for each ad, campaign or asset group with its name, and short video views. From Klaviyo: the revenue and orders Klaviyo credits to each campaign and flow, with their names, channels, send times and number of recipients. From Recharge: daily totals of active, new and cancelled subscriptions and subscription revenue. Plainview reads individual subscriptions only to count them, and keeps just the totals.
- Your logins to those tools. The login or key that lets Plainview read each tool, the account you chose (its ID, name, currency and time zone) and any IDs the platform sends with the login, such as the ID of the Meta user or system user it belongs to. Logins and keys are encrypted before they are stored.
- What you type into Plainview. The cards on your board and in the decision log: titles, notes, dates, results, and any names you add as owners.
- Technical logs. Our hosting provider keeps short technical logs, including IP addresses and errors, to keep Plainview secure and working.
Plainview sets no tracking or advertising cookies and has no analytics of its own. It does not collect special category data, and it makes no decisions about anyone by automated means.
How we use it
- To show your dashboard: your totals against the period before, the charts, the ad and email tables, and what sales did after each change you log. This is needed to provide the service you signed up for.
- To keep it up to date. Shopify orders are refreshed when you open Plainview, and connected tools at most once an hour.
- To run and support Plainview: to keep it secure, fix problems and answer your emails. This is in our legitimate interests.
- To keep our accounts, which the law requires. Shopify bills paid plans, so we see which plan you are on, never your card details.
We never sell your data, never use it for advertising, never share it with other merchants or combine it with theirs, and never use it to train AI models. Nobody at That Other Agency looks at your figures unless you ask us to for support, it is needed to keep Plainview secure, or the law requires it.
Data from Google and the other platforms
Plainview’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, with Google Ads connected, Plainview reads the reports of the accounts you choose (cost, impressions, clicks, conversions and conversion value by campaign, ad and day) and uses them only to show your dashboard. Google Ads has no read only permission, so Google’s screen asks for access to manage your campaigns, but Plainview only ever reads. The data is not transferred to anyone except the providers that run Plainview, listed below, and is not used for advertising.
Data from Meta, TikTok, Klaviyo and Recharge is treated the same way: read only, used only to show you your own dashboard, and deleted when you disconnect the tool. See how to delete your data.
Who we share it with
We never sell your data. A small number of providers run Plainview for us, and they only handle your data on our instructions:
- Shopify, the platform Plainview runs in, which also handles billing.
- Vercel, which hosts Plainview. Its servers for Plainview are in London.
- Neon, which hosts Plainview’s database, in London.
- Google Workspace, our email, if you write to us.
Plainview also sends requests to the tools you connect, to read your reports, and to Klaviyo, to cancel Plainview’s login when you disconnect it. We may share data with our professional advisers, or where the law requires it.
Data outside the UK
Plainview’s servers and database are in London. Some of our providers are based in the United States, so their staff may handle data from outside the UK, for example for support or security. Where that happens, the transfer is protected by the safeguards UK law requires, such as the UK Extension to the EU US Data Privacy Framework or the UK International Data Transfer Agreement.
How long we keep it
- Your orders and your board: for as long as Plainview is installed.
- A connected tool’s login and figures: until you disconnect the tool or uninstall Plainview, when they are deleted straight away.
- Everything else: deleted 48 hours after you uninstall, when Shopify tells us to. The gap lets you reinstall without losing your history.
- Backups: deleted data can stay in our database provider’s backups for up to 7 days.
- Hosting logs: a short time, usually days, for security.
- Emails with us: up to two years after we last spoke, and records of what Shopify paid us for six years, as UK tax law requires.
How we protect it
- Everything travels encrypted (HTTPS), and our database provider encrypts everything it stores.
- Your logins to other tools are encrypted again by Plainview (AES-256), with a key kept apart from the database.
- Plainview asks every platform for read access only, where the platform offers it, and never writes to your store or your accounts.
- Only the people who run Plainview at That Other Agency can reach its database and settings.
- If anything ever goes wrong with your data, we will tell you without undue delay, and the Information Commissioner’s Office where the law requires.
Your rights
You can ask us to:
- give you a copy of the data we hold about you or your store
- correct anything that is wrong or incomplete
- delete your data
- stop or limit how we use it, or object to us using it
- send your data to you or another organisation in a common format
Email hello@thatotheragency.co.uk with your store’s address (yourstore.myshopify.com). It is free, and we will reply within one month. You can also delete most of it yourself: see deleting your data.
If you are a store’s customer
Plainview keeps no personal details about the customers of the stores that use it. If you want to see or delete your data, ask the store you bought from. Shopify passes those requests on to us, and we confirm there is nothing about you to return or delete.
Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page if anything changes, and the date at the top will show when it last changed. If a change affects how your data is used, we will tell you in Plainview before it takes effect.
See also: Plainview’s terms and how to delete your data.