Privacy Policy

Axegren Invest AB, company registration number 559241-6001, Sweden, provides Ecomduct and is the data controller under the General Data Protection Regulation (GDPR).

For privacy questions or requests, contact david.axegren@gmail.com.

We process account information such as your name and email address received through Google sign-in, and content you upload to Ecomduct.

When you choose to connect a service, we process the data needed to provide its features:

• Meta: Facebook Pages, Instagram accounts, posts, post statistics and advertising statistics, and ad set changes you approve (budget, pausing).
• TikTok: profile information, videos and video statistics, and the information needed to publish your own videos.
• Google Ads: account, campaign, search term and product statistics, and the changes you approve (negative keywords, budgets, pausing).
• Shopify: store data, products, inventory, aggregated sales and monthly counts of new and returning customers. We do not store personal data about your shoppers.

We also process connection details, activity records and encrypted access and refresh tokens required to maintain your chosen integrations.

We use data to authenticate users, display statistics, schedule and publish your own content, analyse performance, and create AI-assisted content suggestions.

We do not sell personal data, use it to advertise for third parties, or train AI models on your data.

We process account and service data because it is necessary to perform our agreement with you and provide the features you request. We rely on our legitimate interests for service security, troubleshooting and improvement, balanced against your rights. Where required, we ask for consent, which you may withdraw at any time.

Integration data is deleted or anonymised when you remove the connection or close your Ecomduct account, unless applicable law requires longer retention. Operational backups and security records may remain for a limited period before automatic deletion.

Platform tokens are encrypted at rest. Access is restricted by workspace and role, and connections can be revoked.

We use service providers for hosting and database services, AI providers through Lovable AI Gateway and Higgsfield for video you choose to generate. Data may also be sent to Meta, TikTok, Google and Shopify when you connect or use those services. The full list is on the Sub-processors page.

Our database and files are stored in the EU (Ireland). Business customers can sign our data processing agreement.

Where data is transferred outside the EU/EEA, we rely on an adequacy decision or appropriate safeguards, including the European Commission’s Standard Contractual Clauses, as applicable.

Ecomduct requests these TikTok scopes only when you connect TikTok:

• user.info.basic — identify and display the connected profile.
• user.info.stats — display profile statistics.
• video.list — retrieve your videos and their performance.
• video.publish and video.upload — upload and publish videos you explicitly approve.

Ecomduct does not publish without your action and approval. You can revoke access in TikTok’s connected-app settings and disconnect TikTok in Ecomduct.

Ecomduct’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Subject to the GDPR, you may request access, correction, deletion, restriction or portability of your data, and object to certain processing. You may also withdraw consent without affecting earlier lawful processing.

Contact us to exercise these rights. You may lodge a complaint with the Swedish Authority for Privacy Protection, IMY.

We may update this policy when the service, law or our providers change. The current version and update date will always be available on this page.