Trenchroom

Legal

Privacy Policy

Last updated: 30 September 2026

Trenchroom is a read-only reporting dashboard for e-commerce operators. It combines a team’s Shopify sales with its Google Ads and Meta Ads performance, so the team sees spend, ROAS and profit per store and per day in one place. Trenchroom is operated by Captivo Commerce LLC, Sheridan, Wyoming, USA (“we”, “us”). This policy explains which data Trenchroom reads, why, how it is stored, and how you can revoke access and delete it. Contact: trenchroomapi@gmail.com.

Who can use Trenchroom

Trenchroom is invite only. Accounts are created for members of an organization; there is no public sign-up. Every member sees only the data of their own organization.

Google user data: Google Ads

When a member of an organization connects Google Ads, they sign in with Google and grant Trenchroom access to the Google Ads API. Google offers one access scope for this API; Trenchroom uses it for reporting only.

What we read (reporting data only), for the ad accounts that member can access and links to a store:

  • account details: customer ID, account name, currency and time zone;
  • campaign IDs and names;
  • performance per day: cost, clicks, impressions, conversions and conversion value;
  • the e-mail address of the Google account that connected, to show who connected it.

What we never do: we never create, change, pause or delete campaigns, ads, budgets, bids, audiences or any other setting in a Google Ads account. We do not read or store data about the people who see or click the ads.

Why: to show the organization its own reports inside Trenchroom: ad spend per store and per day, ROAS, the ROAS needed to break even, and net profit after ad spend.

How it is stored: the reporting data is stored in our database (Supabase, hosted in the EU, Ireland), with access rules that limit every row to its own organization. The OAuth refresh token is stored encrypted (Supabase Vault), is read only by our server to fetch the reporting data, and is never shown in the app or sent to a browser. All traffic uses HTTPS.

Never sold or shared: Google user data is never sold, never used for advertising, and never shared with anyone outside the organization it belongs to. It is not used to develop, improve or train generalized artificial intelligence or machine learning models. People at Captivo Commerce LLC do not read it, except with your permission for a specific support request, for security purposes, or when the law requires it.

Limited Use: Trenchroom’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access and deleting data:

  • Disconnect Google Ads in Trenchroom under Settings. We revoke the token with Google and delete it right away.
  • Or remove Trenchroom’s access from your Google account at myaccount.google.com/permissions.
  • To delete the Google Ads data already synced (or all of your organization’s data), use Data deletion or e-mail trenchroomapi@gmail.com. We delete it within 30 days and confirm when it is done.

Other data we access

  • Account data: your name and e-mail address, used to sign you in with a one-time code.
  • Shopify: orders, refunds, sales totals, products, sessions and payouts of the stores your organization connects, read-only. We keep amounts, dates, order numbers and the order’s city and country; we do not store customers’ names, e-mail addresses, phone numbers or street addresses.
  • Meta Ads (when connected): the same kind of reporting data as for Google Ads (account details, campaign names, daily spend and results), read-only, handled the same way. You can remove access in your Meta Business settings under Business Integrations.
  • Payment providers (for example Whop, when connected): payments, fees, refunds, disputes, payouts and balance, read-only, without customer contact details.
  • Store visitor counts: the Trenchroom pixel on a connected store counts visits, add-to-carts and checkouts to show conversion rates. It stores no IP address and records a visitor’s city only when the visitor has given consent.
  • Data you enter: cost settings, fixed costs, cash items, tasks, goals and notes for the assistant.

The assistant

Trenchroom includes an assistant (Amigo) that answers questions about your own figures. To answer a question, the figures it needs are sent to our AI provider (Anthropic) under terms that do not allow them to be used to train models. Voice features, when switched on, send the recording to our speech provider (ElevenLabs) to turn it into text; recordings are not stored by Trenchroom.

Where data is processed

Our database runs in the EU (Ireland, Supabase) and the app on Vercel in Dublin. These providers process data only on our instructions to run Trenchroom.

Retention

We keep data as long as your organization uses Trenchroom. When an organization leaves, or asks us to delete its data, it is deleted within 30 days.

Cookies

Trenchroom uses only the cookies needed to keep you signed in and to protect the sign-in flow with Google. No tracking or advertising cookies.

Changes

If this policy changes, we update the date above and tell members in the app.

Contact

Captivo Commerce LLC, Sheridan, Wyoming, USA · trenchroomapi@gmail.com