Privacy Policy

Who we are

pebzy is operated by Tollemache Group Pty Ltd (ABN 95 683 886 535, ACN 683 886 535), a company registered in Australia(“we”, “us”, the “Company”). We are the data controller for the information described here. You can reach us any time at dylan@toldyouicoulddoit.com.

pebzy is a customer-service and operations assistant for online shops. You connect the accounts you already run, and pebzyhelps you read what’s happening and draft work — always asking before it changes anything.

What we collect, by source

Your account with us. When you sign up we store your name, email, the shop you connect, your settings, and the messages you exchange with the assistant.

Shopify. With your authorisation we read your products, inventory, orders, customers, and fulfilment status so the assistant can answer questions and draft replies. pebzy only writes a change to your shop after you explicitly approve that specific change.

Google Ads. If you connect Google Ads, we use the Google Ads API scope https://www.googleapis.com/auth/adwords to read your advertising performance — campaigns, ad spend, conversions, return on ad spend (ROAS), and the Google Ads account/customer IDs needed to query them. We use this data solely to show you reporting inside your own pebzy dashboard. We do not create, edit, pause, or delete campaigns.

Meta (Facebook & Instagram). If you connect Meta, we use the Marketing API permissions ads_read and read_insights to read your ad account performance — spend, ROAS, conversions, and the ad account IDs needed to query them — solely to show you reporting inside your own pebzy dashboard. We do not create or manage campaigns and we do not request write access.

How we use it

We use the data above only to provide the service to you:

• to answer your questions about your shop and your advertising;
• to draft customer-service replies and proposed actions for your approval;
• to show you reporting on sales and ad performance;
• to operate, secure, support, and bill for your account.

We do not use your connected-platform data for advertising or retargeting, we do not sell it, we do not transfer it to data brokers, and we do not use it to make credit or lending decisions. We do not use your Google or Meta data to train generalised AI or machine-learning models.

Google user data — Limited Use

pebzy’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely, that means: we only use Google Ads data to provide and improve the user-facing reporting features you asked for; we do not transfer it except as needed to provide those features, to comply with the law, or as part of a merger or acquisition (with your prior consent); we do not use it for advertising; and we do not let humans read it except where you give consent, where it is necessary for security or to comply with the law, or in aggregated and anonymised form.

Who we share it with

We do not sell your data. We share it only with the service providers (sub-processors) that help us run pebzy, each under contract and only as needed to operate the service:

• Vercel Inc. — Application hosting and content delivery.
• Neon Inc. — Managed Postgres database (your account data).
• Anthropic PBC — The Claude language model that powers the assistant's replies.

We may also disclose data to comply with the law or a valid legal request, or to protect the rights, safety, and security of our users and the service.

How we store and protect it

Your data is encrypted in transit (HTTPS) and the credentials we hold for your connected accounts are encrypted at rest. Each customer’s data is logically isolated from every other customer’s. Access to production systems is restricted to the people who operate the service.

Retention and deletion

We keep your data only as long as your account is active. You can revoke any connection at any time, and you can delete your account at any time. When you disconnect a platform, we stop accessing it and remove the stored credentials for it. When you delete your account — or when you delete the pebzy app from your Meta or Google account — we delete the data we hold for you.

For step-by-step instructions, including how to ask us to delete your data, see our Data Deletion page. Meta users can also trigger deletion through Meta; we handle those requests through our data-deletion endpoint.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these, email dylan@toldyouicoulddoit.comand we’ll respond within a reasonable time.

Changes to this policy

If we make material changes, we’ll update the date at the top and, where appropriate, notify you. Your continued use of pebzy after a change means you accept the updated policy.

Contact

Questions about this policy or your data? Email dylan@toldyouicoulddoit.com, or write to Tollemache Group Pty Ltd, ABN 95 683 886 535, Australia.