Privacy Policy

This Privacy Policy explains how Margain (https://margain.app) collects and uses information when you use the Margain product and website. Margain is an operations product for commerce businesses.

Information we process

Depending on how you use Margain, we may process account details (such as name and email), organization and membership data, billing identifiers when payments are processed through Paddle, encrypted credentials for connected services, commerce records you import or sync (such as products, orders, and customers from Shopify or WooCommerce), marketing campaign and spend records when Meta is connected, financial records when Stripe is connected, and operational logs needed to run and secure the service.

Connected services

When you connect services such as Shopify, Meta, or Google Sheets, Margain stores OAuth credentials securely and syncs data into your organization so the product can work. You can also connect WooCommerce via WooCommerce Application Authentication or merchant-provided REST API Consumer Key and Secret, with optional automated live updates powered by webhooks. When disconnecting a commerce store (Shopify or WooCommerce), you can choose either “Disconnect only” (which revokes credentials and pauses sync while retaining imported records as historical workspace data) or “Disconnect & purge data” (which permanently removes store-specific orders, inventory levels, and exclusive catalog items). For WooCommerce, disconnecting also automatically cleans up and deregisters Margain-managed webhooks from your store. Disconnecting non-commerce services clears stored credentials and stops further syncing while retaining historical workspace metrics unless an organization erasure request applies.

When you connect Stripe, Margain syncs financial records (balance transactions such as charges, payouts, fees, and refunds) into your workspace for reporting. If you disconnect Stripe, your secret key is removed from Margain, but financial records already synced remain in your workspace unless you ask support@margain.app or privacy@margain.app to remove them.

How we use information

We use this information to provide and improve Margain, authenticate users, sync connected systems, process billing for paid subscriptions, respond to support and privacy requests, and keep the service secure and reliable.

Operational and security logs

Margain keeps internal logs of significant product actions, such as connecting or disconnecting an integration or changes to membership, to support security and operations. These logs include timestamps, action type, and technical details such as IP address and browser information recorded at the time of the action. These logs are not exposed to users through the product UI.

Export

Organization owners and admins can download a JSON export of core records from Settings → Privacy & data (or Organization settings). Exports are currently capped at 2,000 rows per record type. For larger exports, contact support@margain.app.

Deletion

You can delete your own user account from Security settings unless you are the sole owner of an active organization. In that case, transfer ownership first. Deleting a user account removes your login and personal profile. It does not delete organizations or the workspace data they hold.

Organization deletion is requested through support@margain.app. When an organization is deleted, credentials for connected services are cleared and syncing stops. After a short grace period (default 7 days), Margain hard-deletes workspace business data (commerce, customers, marketing, financial ledger, imports). The organization tombstone and Paddle billing identifiers may remain for accounting. You can ask privacy@margain.app to accelerate workspace purge after soft-deletion.

Shopify customer deletion requests redact customer personal data and related order contact details. Shopify shop deletion hard-deletes that shop's commerce data in Margain. Meta data-deletion requests disconnect Meta for the Facebook user and remove campaign/spend records synced through those Meta connections. Manual Meta disconnect keeps campaign history. More detail is on our GDPR, Shopify data deletion, and Meta data deletion pages.

Retention

Import file uploads are removed from storage after about 7 days by default. Soft-deleted organizations have workspace data purged after a short grace period (default 7 days). Stripe ledger rows have no shopper contact fields and stay until workspace purge. Disconnecting a service clears credentials. For commerce stores (Shopify and WooCommerce), you can choose to retain historical business metrics or immediately purge store-specific data upon disconnect. For other integrations, historical business metrics remain in your workspace unless a provider deletion callback requires it (Meta data deletion; Shopify shop deletion) or an organization workspace purge applies.

Subprocessors

Margain uses trusted infrastructure and service providers listed on our Subprocessors page.

Contact

Privacy questions: privacy@margain.app. Security reports: security@margain.app.