Connected sources
Your retail context
Catalog, margin, stock, returns, GA4, Google Ads and the commercial fields your business uses.
Security & Data
Your business data stays under your control.
Expanly combines the commercial and advertising data needed to make a priority decision. Detailed margin, stock, returns and rule logic stay in Expanly. Advertising platforms receive the approved priority signal needed for execution.
Data flow
Business context in. A clear priority signal out.
Expanly keeps the detailed commercial logic inside the service and delivers the minimum signal the advertising setup needs.
Expanly
Rules and priorities
Business Rules combine the data, evaluate the catalog and assign approved High, Standard and Low priorities.
Advertising delivery
The approved signal
Google receives the priority label through Merchant Center. Supplemental Feed contains item IDs and one selected label column for Meta or your feed tool. These deliveries do not include detailed margin, stock or sales data. Supplemental Feed uses generated credentials; deleting the destination revokes access.
Access and protection
Clear controls for the people and systems using the data.
Security is part of how the workspace, integrations and approval flow are designed.
Encryption
Customer data is encrypted in transit and at rest as part of Expanly's security controls.
Workspace isolation
Workspace boundaries are enforced in the application so users access the retail data and rules assigned to their workspace.
Role-based access
Owner, admin, editor and viewer roles separate organization control, configuration work and read-only access.
Human control
Owners choose whether AI apps can only read or also make changes. Publishing requires edit rights. AI apps can be set to ask before high-impact actions, such as publishing or deleting a data connection.
Data location
EU-based core infrastructure, documented supporting services.
Expanly's production data is hosted in Google Cloud's EU region, and authentication uses an EU Auth0 tenant. Some supporting service providers operate globally. Their processing locations and transfer mechanisms are listed in the Data Processing Agreement.
View subprocessors and locations →Expanly AI Connector
The Expanly AI Connector works with the data your users can already access.
The Expanly AI Connector (called the Expanly MCP in our terms) lets an AI app chosen by the customer, such as Claude or ChatGPT, analyze the synchronized data in the customer workspace, explain the evidence and prepare reviewable actions. Expanly does not use customer-identifiable data to train AI or machine learning models without the customer's prior written consent. The AI provider's own data storage, retention and training settings are governed by the customer's agreement with that provider.
An owner of the customer's organization turns on AI access and chooses Read-only or Read and write. Each call uses the signed-in user's Expanly permissions and is recorded. See Appendix 2 of the Terms of Service.
The Expanly AI Connector works with compatible AI apps approved by the customer. In Microsoft 365 Copilot, the organization's IT administrator adds the connection inside its approved environment.
Transparency
Need the contractual detail?
Review the public Terms of Service and Data Processing Agreement, or ask us about your security and data requirements.