Privacy Policy.

1. Who we are

TestFeed is operated by Yesterday Pty Ltd (ABN 69 670 639 219), trading as TestFeed.

2. What we collect

From your store’s customer and order data, TestFeed builds a behavioral overlay:

• A hashed customer identifier (HMAC-SHA256, one-way, never the raw customer ID)
• Province and country code
• Orders count and total spent
• Last order date
• Product affinity tags

This data is pseudonymized, not anonymous. We minimize what we store and the fields above cannot be used to directly contact or identify a customer, but they may still be considered personal data under some privacy laws.

From you as the merchant, we collect your name, email, store domain, and billing information to operate your account.

3. From your connected Meta Ads account (optional)

If you connect your Meta (Facebook) advertising account, TestFeed uses this to calibrate your AI panel against your own real ad performance, instead of relying only on invented traits.

You approve a read-only permission (ads_read) through Meta’s own “Facebook Login for Business” flow. TestFeed never receives the ability to create, edit, or spend on ads, and never sees your Meta password.

From this connection, TestFeed receives:

• Ad performance: impressions, clicks, spend, reach, and conversions, at the ad/campaign level
• Aggregate audience breakdowns: age range, gender, and country distribution of the audience your ads reached

This data is aggregate only. TestFeed does not receive any individual end-customer’s name, contact details, or other personal information through this connection, only aggregate figures belonging to your own ad account.

Meta-derived data is never shared with or shown to another merchant.

Disconnecting and deleting Meta data. You can disconnect your Meta ads account at any time from within TestFeed. This immediately revokes TestFeed’s stored access key, and does not require a separate deletion request. To request deletion of the ad-performance and audience data TestFeed holds from your Meta connection, email [email protected] with the subject line “Meta data deletion request”, from the email address on your TestFeed account. We will delete it within 30 days of a verified request.

4. What we never collect

We do not collect or store names, emails, phone numbers, addresses, or any other direct customer identifier. Shopify sends us full webhook payloads. We extract the fields above and discard the rest. Raw payloads are never stored.

Through the Meta Ads integration, we also do not collect or store any individual end-customer’s name, contact details, or other personal information, only aggregate ad-performance and audience figures from your own connected ad account.

5. Permissions we request

TestFeed requests read_products, read_customers, and read_orders. These permissions are used only to derive the pseudonymized fields in Section 2. Direct customer identifiers such as names, emails, and addresses are never stored.

If you connect Meta Ads, TestFeed requests Meta’s ads_read permission only. This permission cannot create, edit, or spend on ads.

6. Sub-processors

We use a small number of sub-processors to operate TestFeed:

• A hosting and infrastructure provider.
• An operational telemetry provider. Used for error monitoring, no customer data.
• AI model providers. Process the pseudonymized overlay fields to generate AI panel responses. We do not name specific providers or model versions.

Tools you connect to your own store independently are covered by that provider’s own privacy policy, not this one.

7. Where data is stored

With our hosting and infrastructure provider, in servers used for app data (overlays, sessions) and generated study artifacts. Data is encrypted in transit and at rest.

8. Purpose limitation

We use the data described in Section 2 only for the purposes described in this policy: calibrating your AI panel and running the tests you configure. We do not use it for any other purpose.

9. Retention and deletion

Behavioral overlay data is retained for as long as the app is installed on your store. Within approximately 48 hours of uninstalling the app, all related overlay and account data is deleted from our infrastructure. When Shopify sends a customers/data_request, customers/redact, customers/delete, or shop/redact webhook, we respond within 30 days. Redaction requests result in immediate deletion of matching overlay records.

10. Your rights

You may have rights to access, correct, or delete data relating to you, depending on your location. TestFeed does not sell personal information.

TestFeed’s AI panel generates research insights for the merchant. It does not make any decision about an individual customer’s account, order, or eligibility for anything, and has no legal or similarly significant effect on any individual.

TestFeed does not rely on customer consent to process the data described in Section 2, since it’s derived from backend Shopify webhooks rather than a consent flow, and does not share or sell data.

11. International data transfers

Some of the data described in Section 2 may be processed by sub-processors located outside Australia. We take reasonable steps to ensure this data is protected in accordance with applicable law.

12. Contact us

Yesterday Pty Ltd (trading as TestFeed)
156 Boundary Street, West End, QLD, Australia, 4101
Email: [email protected]