Privacy notice

NetMargin Studio ("we", "us") provides the NetMargin Studio website and service and is responsible, as controller, for the personal information described in this notice. The company behind NetMargin Studio is named in "Our company details" below.

For any privacy question or request, email support@netmarginstudio.ai.

This notice covers our public website, the NetMargin Studio service (including the dashboard you sign in to), the TikTok Shop and TikTok Ads connections you choose to make, the Shopify, Google Ads and Meta Ads connections described below for workspaces that already use them, the emails we send and the support we provide.

Account and security: your email address, your name if you add one, your password (stored only in a protected form that cannot be read back), your two-step verification settings and backup codes (stored protected), your sign-in sessions and security events such as failed sign-in attempts. When our staff open a workspace to support or administer the service, we keep a record of that access for one year.

Workspace and team: your workspace name, its members and their roles, and the email addresses of people you invite.

TikTok Shop information: when a workspace owner or admin connects a TikTok Shop through TikTok's own authorisation screen, we receive the shop's details, products and product images, orders and their status, returns and refunds, fees, settlements and statements, and fulfilment details. Return records include the reason given for the return and, where an item is sent back, the carrier and tracking number of the return parcel and the return address your shop uses. We keep the connection's authorisation credentials in encrypted form. We do not keep buyers' names or delivery addresses with your orders.

Costs and settings you enter: product costs, packaging, shipping rules, business expenses, advertising spend you add, VAT and reporting settings.

Billing: payments are handled by Stripe. We receive and keep your Stripe customer and subscription references, your plan, its status and billing periods. We never receive your full card number.

Cancellation feedback: if you cancel your plan in NetMargin Studio, the reason you choose and any short comment you add, with the plan and the dates. We use it to understand why customers leave and to improve the service, keep it with your workspace and delete it when the workspace is deleted. We do not pass it to the live chat or to analytics, and Stripe receives only a general reason category.

Free trial record: to make sure each TikTok Shop has only one free trial, we keep a record that the shop has had a trial, the date it started and, while the workspace exists, which workspace it belongs to. The record is made from the shop's TikTok identifier in a form that does not show the shop's name or identifier, but it can still be linked back to that shop. Where it relates to an individual, such as a sole trader, we treat it as personal information.

Emails we send: account emails such as password resets, and notices before data is deleted. For deletion notices we keep a reference to each message and whether it was delivered.

Correspondence: the emails you send us and the information you include in them.

Live chat: if you choose to open the chat, the messages you send, any email address you give so we can reply, and the technical details the chat needs to work, such as your IP address, browser and the page you are on. The chat does not load until you open it, and we do not pass your account, shop or figures to it.

Website requests: IP addresses, browser details, pages requested and times, processed by our hosting provider to deliver and protect the website and service.

TikTok Shop is the connection every customer can use, and any workspace can also connect TikTok Ads. Shopify stores, Google Ads and Meta Ads are not offered to new customers; for those, this section applies only to workspaces that already use them.

Shopify: for a store connected through Shopify's own authorisation, we receive the store's orders, refunds, payouts, fees and fulfilment details, and each order's delivery country, region and postcode, but not buyers' names, email addresses or street addresses.

Advertising accounts: we receive advertising account and campaign identifiers and names, currencies, advertiser time zones, daily advertising costs and related reporting records, and authorisation credentials, which we store encrypted. For Google Ads and Meta Ads we also receive the purchase conversion values they report. For TikTok Ads we also receive which TikTok Shop each GMV Max campaign promotes.

Google account access is granted through Google's own sign-in and consent screen; we never receive your Google password. The Google Ads connection is reporting only. It does not create, edit or delete campaigns, advertisements, bids or budgets, or upload conversions.

We do not sell Google user data, use it for targeted advertising, or provide it to data brokers, information resellers or advertising networks. NetMargin Studio's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. We do not transfer or disclose Google user data for purposes other than those described in this notice and permitted by that policy.

Google user data is protected by encrypted connections to Google and to our data storage, encryption of the saved access details we use to renew that access, and sign-in and workspace permissions that limit access to authorised users.

You can revoke Google access at any time in your Google Account connections (https://myaccount.google.com/connections). Revoking access stops further access but does not by itself delete information already imported.

We use information to provide and secure NetMargin Studio: to import your shop's orders, fees and settlements, combine them with the costs you enter, and show your profit; to keep your connection working; to manage your plan, free preview and free trial; to send account, security, plan and deletion notices; to answer support requests; to prevent misuse; and to meet legal obligations.

We do not sell personal information, and we do not use the information from your connected shop to advertise to you or anyone else. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Providing the service you sign up for (your account, workspace and team, importing your TikTok Shop information, calculating your figures, your plan, free preview and free trial, and account, plan and deletion notices): performing our contract with you, or taking steps you ask for before entering one. Where you use NetMargin Studio on behalf of a business that has the contract with us, we rely on our and that business's legitimate interests in providing the service it signed up for.

Keeping the service secure and preventing misuse (sign-in protection, limits on repeated attempts, security records and website request logs): our legitimate interests in protecting NetMargin Studio, our customers and their information.

The free trial record: our legitimate interests in offering a free trial fairly, once per TikTok Shop, and preventing repeated free trials.

Cancellation feedback: our legitimate interests in understanding why customers cancel and improving NetMargin Studio.

Invitations: the legitimate interests of the inviting workspace, and ours, in letting a business add the people it works with.

Answering your messages: performing our contract with you where your message is about your account; otherwise our legitimate interests in answering enquiries.

Invoices and payment records: our legal obligations to keep business and tax records.

You can object to processing based on legitimate interests (see "Your rights"). Your email address and a password are needed to create an account; without them we cannot provide the service.

NetMargin Studio is operated by MAYWELL EDGE LIMITED, a company registered in England and Wales under company number 16386047, with its registered office at 128 City Road, London EC1V 2NX. MAYWELL EDGE LIMITED is the controller of the personal information described in this notice.

We use service providers who process information on our behalf and under our instructions, for: hosting the website and service; data storage; payments and subscriptions (Stripe); sending account and service emails; and our customer support mailbox and live chat. They may use it only to provide their services to us.

Stripe processes payment information to provide its payment services to us. Stripe may also use information for its own purposes, such as preventing fraud, as described in Stripe's privacy policy (https://stripe.com/privacy).

We exchange information with TikTok and, for workspaces that use those connections, with Shopify, Google and Meta, to maintain the connections you authorise. Their use of information is governed by their own terms and privacy policies.

Members of your workspace see information according to the role the owner gives them. Our personnel access information only where needed to operate, secure or support the service. We may disclose information where the law requires it.

Our main data storage is in London. Some of our service providers, including those for payments and email delivery, process information in other countries, including the United States, and some may access information from other countries to provide technical support.

Where personal information is transferred outside the United Kingdom, we rely on one of these safeguards: UK adequacy regulations (for example for the European Economic Area, or for a United States organisation certified under the UK Extension to the EU-U.S. Data Privacy Framework); or the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, included in the provider's data processing terms.

Email support@netmarginstudio.ai to ask for more information about these safeguards.

While your workspace has a free trial or a plan, we keep its data. Disconnecting a shop keeps the history already imported.

If your plan ends, we keep the workspace's data for 90 days from the day access ends. Choose a plan again before then and everything is there as you left it. After that, the workspace, its stores, orders, costs and reports are permanently deleted.

A free preview is kept while it is used. If nobody in the workspace opens NetMargin Studio for 90 days, the preview is deleted.

Before anything is deleted, we email the workspace owner 14 days and 3 days ahead with the date. That date can move later but never earlier.

Deletion can be delayed, never brought forward. We do not delete a workspace until we have confirmed that both emails reached the owner and that no payment, checkout or subscription change for it is still in progress. If we cannot confirm this, the workspace stays as it is and we try again later.

After a workspace is deleted we keep only: invoices and payment records held by Stripe, the free trial record described above (only to make sure each shop has one free trial), and a deletion record that contains no personal information.

We review support correspondence, including chat conversations, at least every 12 months and delete it when it is no longer needed for the request, related issues or legal obligations.

Deleted information can remain in our data storage provider's recovery history for a limited period before that history expires. It is not restored to the service.

A workspace owner can delete the workspace and their account at any time in Settings, Security. Any active subscription is cancelled first; the workspace and its data are then deleted immediately.

A team member can delete their own account in Settings, Security. They leave every workspace, and their name, email address and sign-in details are removed. Each workspace and its business data stay with its owner.

Disconnecting a TikTok Shop removes the stored connection credentials and keeps the history already imported.

For any other request, email support@netmarginstudio.ai. We may need to confirm your identity and your authority over the account or workspace before acting.

We use encrypted connections, store passwords and connection credentials in protected or encrypted form, offer two-step verification, and limit what each workspace member can see and change by their role. No method of transmission or storage is completely secure.

We use only the cookies the service needs: a sign-in session cookie, and short-lived cookies during two-step sign-in. Your browser also keeps some display preferences, such as the dashboard layout. If you open the live chat, our chat provider stores a cookie and browser storage so your conversation continues as you move between pages or come back later; nothing is stored until you open it. These are strictly necessary for the service or for the chat you ask for, so they do not need consent. We do not use analytics or advertising cookies. Our hosting provider may apply security measures to protect the website and service.

If we ever introduce optional analytics, we will update this notice and ask for consent where it is required before turning it on.

Depending on the law that applies to you, you may have the right to access, correct or delete your personal information, to restrict or object to its processing, and to receive a portable copy. Where processing relies on consent, you can withdraw it.

Email support@netmarginstudio.ai to exercise your rights. We respond without undue delay and normally within one month, and explain if a lawful extension applies.

You can also complain to the UK Information Commissioner's Office (https://ico.org.uk/make-a-complaint/) or your local data protection authority.

We will update this notice when our service or practices change, and tell affected users about material changes where the law requires it.