Approval before ship
Material campaign and commercial changes land in pending review until a human approves. That is product philosophy, not a footer disclaimer. Draft → review → ship. See operator docs and campaign review.
What Ralph will not claim
- Fully autonomous “set and forget” media that publishes without you by default
- Black-box spend you cannot inspect
- Replacing your ad account ownership
Multi-tenant isolation
Each store is sandboxed. Tokens are encrypted. Operator context is not mixed across merchants. Built for 1000+ concurrent stores, not demo tenancy theatre.
Your keys
You keep Shopify and ads account ownership. Ralph is an operator layer with optional channel connections — not a hostage agency login model.
Data use
We do not sell your merchant data. Detail lives in the privacy policy. Data deletion: data deletion.
Status
Lightweight health: system status. Ship log: updates.
Who builds this
Ralph is built by Must Be Agency / David Smith — practitioners, not a pure demo lab. Product bias: Tuesday-morning operator reality.