ApexPricer
Privacy policy
Last updated: 23 September 2026
This privacy policy explains which personal data ApexPricer processes, why we do so and which rights you have. We keep it deliberately concrete: we only mention what we actually do.
1. Who is responsible
ApexPricer is a service of BoenderXL E-commerce B.V. (Chamber of Commerce (KvK) number 90816900, VAT number NL865462926B01), Oostdijk 25, 3077 CP Rotterdam. You can send questions about privacy to info@gianboender.nl.
For the data about your own webshop and advertising accounts that you connect to ApexPricer, we act as a processor on your behalf. On request, we will enter into a data processing agreement with you.
2. Which data we process
- Early access sign-up: your email address.
- Your account: your email address and your password. We only store the password as a secure hash, so not in readable form. We also store your login session.
- Data from your webshop (via Shopify): products and variants with title, SKU, EAN, selling price, purchase price (if you enter or import it), stock, and your shipping rates and shipping costs.
- Data from Google Ads: per product the advertising costs, clicks, conversions and conversion value, and the names of your campaigns.
- Competitor prices: prices that we retrieve from the public web pages of your competitors. These are not personal data.
- Proposals and decisions: the price proposals and ad actions that ApexPricer makes, and whether you approve or reject them.
- Technical data: our hosting provider records technical data with every visit, such as your IP address, in server logs.
- Subscription and payment: which plan you have, the term and the status of your subscription. We receive this from Shopify. We do not receive your payment details, such as a card number: Shopify processes those.
- Orders from your webshop (order lines): for each sold line the product, the quantity, the price paid and the order date, and whether it was cancelled. We only use this to show your revenue and gross profit per product and what a price change delivered. We store nothing about the customer who ordered: no name, address, email address or phone number.
We do not read customer data from your webshop, so no names, addresses or contact details of your customers. If a customer asks via Shopify to have their data erased, we also delete the order lines of their orders. We do not process special categories of personal data.
3. What for and on what legal basis
- Letting you know when there is room (waiting list): based on your consent. You can withdraw it at any time by emailing us.
- Providing your account and the service (price proposals, margins, ad actions): to perform the agreement with you.
- Security and preventing abuse (for example keeping bots off the sign-up form): based on our legitimate interest.
- Complying with legal obligations, where necessary.
- Managing your subscription (plan, payment, cancelling): to perform the agreement with you.
4. Data from Google Ads
If you connect ApexPricer to Google Ads, we use the data from that account only to provide your service: showing you what a product earns after advertising costs, proposing to exclude products from a campaign (or include them again), and making that change after you have approved it.
We do not sell this data, do not use it for advertising, and do not share it with third parties beyond what is stated below. We also do not use it to train AI models. Our staff only read it with your permission, for security or abuse purposes, or when the law requires it.
ApexPricer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can always withdraw ApexPricer's access to your Google account through the security settings of your Google account, or by disconnecting in the settings of ApexPricer. Disconnecting also deletes the stored access token, which we keep encrypted. On your request, we delete the data we received from Google Ads.
5. With whom we share data
We work with the following parties that process data on our behalf:
- Vercel Inc. for hosting the website and the application.
- Neon for the database in which the data is stored.
- Shopify for handling the payment of your subscription, if you pay through Shopify. Shopify is itself responsible for the data it processes for that.
Shopify and Google are the sources that you yourself connect to ApexPricer. Beyond that, we only share data if the law requires us to.
6. Where the data is stored
Our application (Vercel) and our database (Neon) run in Frankfurt (Germany), within the European Union. Vercel and Neon are American companies. For access from the United States, for example for support, and for worldwide delivery of the website and the log files, we ensure appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.
7. How long we keep data
We keep your data for as long as you have an account or are on the waiting list. If you stop, we delete your data within 30 days, unless we have to keep it longer because the law requires it.
8. Security
The connection to ApexPricer is encrypted (HTTPS). Passwords are only stored as a hash and we keep access tokens of integrations encrypted. The data is separated per webshop, so a webshop only sees its own data. Nothing is changed in your webshop or advertising account unless you approve it, change a value yourself, or turn on automatic applying for price changes within limits you set yourself.
9. Cookies
We use two functional cookies: the session cookie that keeps you logged in and a cookie that remembers your language choice. We do not use tracking or advertising cookies or analytics services, so we do not show a cookie banner either.
10. Your rights
You have the right to access, correct or delete your data, to restrict the processing of it or object to it, and to data portability. If you have given consent, you can withdraw it at any time. Email us at info@gianboender.nl; we will respond within one month.
Do you disagree with how we handle your data? Then you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11. Changes
We may change this policy, for example when we add new integrations. The date at the top shows when it was last updated. For important changes, we will let you know in advance.
This text is also available in Dutch. In case of differences between the Dutch and the English version, the Dutch version prevails.