This Privacy Policy explains how Meriman Media Ltd, trading as Leading Social ("we", "us", "our"), collects, uses, stores and protects personal data in connection with the Leading Social Growth OS application and website at app.leadingsocial.com (the "Service"). We are based in Ireland and act as a data controller for the personal data of our platform users, and as a data processor for the merchant store data we analyse on our customers' behalf.
Meriman Media Ltd (trading as Leading Social), Ireland. For any privacy question or to exercise your rights, contact us at levi@leadingsocial.com.
The Service is a commerce analytics platform for e-commerce brands and the agencies that serve them. We process:
| Category | Examples | Source |
|---|---|---|
| Account data | Name, work email, workspace and role | You, via our authentication provider (WorkOS) |
| Store commerce data | Orders, refunds, products, currency, store profile | Connected platforms (e.g. Shopify) with the merchant's authorisation |
| Customer data (protected) | Customer name, email and order history | Shopify, used only to classify new vs. returning customers and to produce merchant reporting |
| Technical data | Log and security metadata (e.g. IP address, timestamps) | Automatically, when you use the Service |
We do not collect payment card numbers, and we do not use store customers' personal data for advertising or sell it to anyone.
Where a merchant connects a Shopify store, we request the minimum access needed for analytics
(read_orders, read_products, read_customers). Customer
name and email are used solely as identifiers to distinguish new from returning customers and to
generate the merchant's reports; they are not displayed as marketing contacts and are never sold.
We honour Shopify's mandatory data-protection webhooks:
Data is encrypted in transit (TLS) and connector credentials are encrypted at rest. Access is restricted to each workspace (tenant isolation) and to authorised team members by role. Authentication is handled by WorkOS; we never store your account password.
We share data only with service providers that help us run the Service, under contract:
We keep store and account data for as long as the workspace is active and the store is connected. When a store is disconnected or the app uninstalled, its data is deleted or de-identified; customer identifiers are erased on a valid redaction request. Limited security logs may be retained where required for legitimate or legal purposes.
Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Under the GDPR you may request access to, correction of, erasure of, or restriction of your personal data, and you may object to certain processing or request portability. Contact levi@leadingsocial.com. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
We may update this policy from time to time; the "Last updated" date above reflects the latest version, and material changes will be communicated through the Service.
Meriman Media Ltd (trading as Leading Social), Ireland · levi@leadingsocial.com