Privacy Policy
Last updated: June 2026
Overview
Cobar is an AI marketing application operated by Wallaroo Media. This policy explains what data Cobar accesses from a connected Shopify store, how that data is used, and how it is protected. When you connect your Shopify store to Cobar, you control the connection and can revoke it at any time.
Data we access
With your authorization, Cobar reads the following from your store through the Shopify Admin API, to ground the marketing work it produces for you:
- Products, variants, and collections — including SEO fields and media
- Inventory levels
- Orders at a transactional level — line items, totals, discounts, and timing
- Marketing events and existing discounts
- Online-store pages and blog content
Cobar does not access your customers' personal records, your payment or fulfillment settings, or your theme.
Customer data minimization
Cobar is designed to process the minimum personal data necessary. Before any order data is used or stored, directly-identifying customer fields — name, email address, phone number, and billing or shipping address — are removed. Each customer is reduced to an anonymous, salted reference used only to recognize repeat purchases in aggregate. Cobar does not store your customers' personal information, so a customer data-deletion request can be honored in full.
How we use this data
Cobar uses your store data only to provide the service to you:
- Generating insights and recommendations grounded in your store's data
- Drafting marketing content — SEO titles and descriptions, product copy, blog posts, and pages
- Proposing promotions — discount codes and marketing events
Every change to your store is proposed for your review and is written only after you approve it. Cobar never changes your prices, inventory, fulfillment, payments, customer records, or theme. Your data is not sold, is not shared with third parties for their own purposes, and is not used for anything other than providing the service to you.
Data storage and security
Your Shopify access token is encrypted at rest and transmitted only over HTTPS. Credentials and minimized store data are stored in a database hosted on DigitalOcean in the United States, with access restricted to authorized personnel. Documents Cobar produces for you — such as reports and drafts — are stored so you can access them in your workspace. Directly-identifying customer data is never stored.
Data retention and deletion
Cobar retains your connection and the associated minimized data for as long as your store is connected and your account is active. You can disconnect at any time — within Cobar, or by uninstalling the app from your Shopify admin under Settings → Apps and sales channels. When you uninstall or request deletion, Cobar permanently deletes your stored access token and associated data within 30 days. Cobar also honors Shopify's mandatory privacy webhooks for customer data requests, customer redaction, and shop redaction.
Service providers
Cobar uses the following providers to deliver its functionality:
- AI language models — Anthropic, OpenAI, and Google. Your store data may be sent to these providers to generate responses; their data-processing terms apply, and they do not retain your data to train their models.
- Cloud hosting — DigitalOcean (United States).
- Google Workspace — when Cobar produces documents or spreadsheets as deliverables, they are created in Google Drive.
Customer consent and automated decisions
Cobar does not market directly to your customers and does not make automated decisions that produce legal or similarly significant effects for your customers. Every action that affects your store is reviewed and approved by you.
Your choices
You control the connection and can revoke Cobar's access to your store at any time by uninstalling the app. You can also request access to, correction of, or deletion of your data by contacting us.
Contact
For questions about this privacy policy, or to request deletion of your data, contact Wallaroo Media at [email protected].