Privacy policy

1. Who we are

Deltryx is a marketing measurement service provided by RACTING ("we", "us"). This policy covers the website at deltryx.com and the Deltryx application.

For the personal data of our customers' own shoppers and leads, our customer is the controller and we act as processor; see the Data Processing Addendum.

2. Data we collect on this website

This website does not use analytics, advertising or tracking cookies and loads no third-party scripts.

If you submit the demo, contact or agency form, we receive the details you enter (name, email, company, website, role, spend range, platform and message), the page you sent it from, any campaign (UTM) tags in the page address, and a one-way hash of your IP address used only to limit abuse. We do not store your IP address itself.

3. Data we process in the service

Account data: your name, email, a scrypt hash of your password, two-step verification secrets (encrypted), session records with IP address and browser, and an audit log of actions in your organisation.

Customer data you connect: orders, refunds, products and costs from your store; spend and delivery from ad platforms; analytics aggregates; and events collected by the Deltryx pixel and server Events API on your sites.

• Shopper email and phone numbers are stored as SHA-256 hashes, not in clear text.
• Leads collected for lead-generation workspaces may include name, phone and email in clear text, because they are needed to follow up.
• Pixel sessions record pages, referrers, campaign tags, ad click IDs, device type, country and browser user agent. The pixel does not store IP addresses in sessions.

4. Why we use it

To provide the service you signed up for: measuring and reconciling marketing results, attribution, modelling, alerts and reports; to secure accounts and prevent abuse; to reply to enquiries; and to meet legal obligations. We do not sell personal data and do not use customer data to advertise.

5. AI features

When AI features are enabled for an account, questions and the minimum data needed to answer them are sent to Anthropic, which provides the Claude model. When AI is not enabled, nothing is sent. Text from your accounts, such as ad copy or lead notes, is treated as data and wrapped before it reaches the model.

6. Subprocessors

We use the following providers to run the service:

• Cloudflare — DNS, content delivery and network protection
• Hostinger — server hosting
• Anthropic — AI features, only when enabled for the account
• Stripe — payments, when online billing is enabled
• An email delivery provider — account and notification emails
• The advertising, commerce and analytics platforms that you choose to connect, which exchange data with us under your own account with them

7. Retention

Account and customer data are kept while your organisation is active. Raw payload archives are scrubbed of identifiers and deleted after 90 days. Form enquiries from this website are kept for as long as needed to handle the enquiry and any resulting relationship.

Ending a plan does not delete data automatically; you can export it, and ask us to delete your organisation.

8. Your choices and rights

You can access, correct, export or delete your account data, and ask us to delete your organisation. Our customers can export or erase an individual shopper's data from within the product. To make a request, email [email protected]. Depending on where you live, you may also have the right to object to or restrict processing and to complain to a data protection authority.

9. Security

See our security page for the controls we use, including tenant isolation, encryption of secrets and two-step verification.

10. Changes

We will update this page when our practices change and revise the date above. Material changes affecting customers will also be notified in the product or by email.