Trust, approval and data

Approval before anything ships

Every material change Ralph proposes lands in a review queue first. That covers dayparting schedules and throttles, product exclusions, product sets, supplemental feed rows, titles and attributes, and ad drafts. You see the evidence and the exact change, and you confirm before anything goes to Meta, Google or Shopify.

The writers that move money or edit live assets are switched off by default on every plan. On Free they never switch on; the desk is see-only. On Growth, Pro and Scale you enable each writer yourself, and even then it acts only on items you have approved.The mechanics are in the approval docs and in does Ralph spend without approval.

One tenant, one store, no mixing

Ralph is multi-tenant, which means many stores share one platform. Each store's data is scoped to its own client identity on every query, every cache and every background job. One store's orders, customers or ad performance are never used to enrich another's. Pro and Scale run their three or ten stores as isolated tenants, not as one merged dataset.

Tokens are encrypted

When you connect Shopify, Meta or Google, Ralph stores the access tokens encrypted at rest. You can revoke them at the source at any time from your Shopify admin, Meta Business settings or Google account permissions, and revoking access stops Ralph immediately.

Your accounts stay yours

You grant Ralph access. You never transfer ownership. Your Shopify store, your Meta ad account and your Google Ads and Merchant Center accounts remain in your name, on your billing and under your control. There is nothing to hand back when you leave. Disconnect and the access ends.

We do not sell data

Your commercial data, and the personal data of your customers, is used to run Ralph for you and for nothing else. We do not sell it, rent it, share it with advertising networks or data brokers, or use one merchant's data to train models for another. The legal detail is in the privacy policy; deletion is on the data deletion page.

What Ralph will never claim

• Unsupervised spend. Ralph does not move budget, launch campaigns or change bids on its own authority.
• Guaranteed ROAS. Ralph shows the evidence and drafts a move. Nobody can promise a return, and we will not pretend to.
• Silent feed overwrites. Google Merchant Center changes go through supplemental feeds that you approve. Your primary feed is not touched.
• Invented numbers. Missing cost of goods stays missing. Empty customer segments stay empty. Ralph does not fill gaps with plausible figures.

Status

Live reachability for the API, the app and this site is on the status page, checked from your own browser each time you open it. Incidents that need a public note, and everything we ship, appear on updates.

Who builds it

Ralph is built by Must Be Agency, led by David Smith, between Manchester and Bangkok. The team has run growth for real Shopify stores, so the product is biased towards Tuesday-morning operator reality. Ralph is in private beta. You join the waitlist from the home page, and a real person onboards you when your seat opens.

Report a security issue

If you find a vulnerability, email rocketman@mustbeagency.com with what you found and how to reproduce it. Our security.txt lives at /.well-known/security.txt. We read and acknowledge every report. Please give us reasonable time to fix the problem before publishing, and do not test against stores that are not yours.

Questions people ask