Privacy for our Shopify app

Seller Profit Doctor for Shopify is an app a store installs from Shopify to see each order’s profit inside the Shopify admin. It works with the store’s business figures, never with its customers’ details. Everything in our Privacy policy about the website still applies; this page covers what is different for the app.

With read-only access (read_orders, read_products, read_inventory, read_shopify_payments_payouts, read_shopify_payments_accounts, read_customers), only these:

• Each order’s figures: its number, dates, sales channel (Shopify’s source name and the app the order came through, such as Online Store, Point of Sale or Shop), amounts, discounts, shipping charged, taxes, refunds (with the units refunded of each item), payments with the fees Shopify reports for them, and items (product and variant names, quantities, prices and each item’s cost from Shopify).
• The store’s settings: its currency, time zone and Shopify plan.
• With Shopify Payments, the payout transactions tied to each order (the exact fee on each payment, and any chargeback with its fee).
• Each order’s customer ID in Shopify, which the app turns at once into a scrambled code and never keeps as it is.

The store chooses whether to allow the last two kinds (read_shopify_payments_payouts, read_shopify_payments_accounts, read_customers): the app asks for them from inside the app, works without them, and stops reading them if the store takes them back.

Who the store’s customers are: the app never asks Shopify for a customer’s name, email, phone number, address, notes or IP address.

The app’s access is read-only: it can’t change orders, products, prices or inventory, and it writes nothing to Shopify.

• The store: its Shopify address (such as yourstore.myshopify.com), the access Shopify granted, the dates the app was installed and uninstalled, and the access token and refresh token Shopify gives the app, which are encrypted before they are stored.
• For each order it brought in: the figures in section 2, each item’s SKU and weight, its product and variant IDs and the address of its small product picture on Shopify’s servers (the dashboard shows it next to the item), each payment’s method name, whether the order is a test and its payment status, and the profit worked out from them, with the order’s sales channel and the units refunded of each item. With Shopify Payments, the payout transactions in section 2, with their amounts and fees.
• A scrambled code for each order’s customer, never their name, email, phone or address, so repeat buyers can be counted.
• The costs, bundles and shipping rules you enter or upload from a file (costs can carry a start date).
• The costs and settings you enter in the app: a cost per item, a shipping cost rule, a list of monthly costs with the names you give them, and the ad spend amounts you enter for each ad channel and month, and the fee settings you enter (a rate for a payment method, a handling fee per order, an agency percent on ad spend, the currency you enter costs in).
• The daily ad spend you upload from an ad platform’s export: for each day and channel, the amount and its currency, never the file, its campaign names or any other column.
• If you turn on email reports or alerts: the email addresses you enter (up to 3), whether and when each was confirmed and when its last confirmation email was sent, your choices, and a log of which emails went out (when, what kind, to how many addresses; never the email’s contents). An address you add gets one confirmation email and nothing else until someone there confirms it; if you remove it and add it again, it gets a new one at most once in 7 days. Every email, the confirmation too, has a stop link. An address never confirmed is deleted 30 days after its last confirmation email; pressing the stop link in any email, or removing the address in Settings, deletes it at once; and the log is kept 60 days. These are your own or your staff’s addresses, never your customers’, and the emails hold your store’s figures, order numbers and product names, nothing about a buyer.
• For every store together, without any address: when someone presses a stop link, a scrambled code of their address (made with a key only we hold, so it can’t be turned back into the address) goes on a list, so that no store can add the address again and nothing more is sent to it. The list keeps only the code, why it is there and the date, for as long as the app runs; if that person writes to us, we take their code off. So that one person can’t be sent many confirmation emails by many stores (at most 2 a day and 5 a week), the same kind of code is kept with the time of each confirmation email for 8 days. Uninstalling the app doesn’t delete either, since they keep a person’s request, not a store’s data.
• Shopify’s delivery IDs: for each message Shopify sends the app (such as “the app was uninstalled”), its ID, its kind and the store, never its contents, for 7 days, so a message Shopify sends twice is handled once.
• The app’s progress: where the import of orders stands, whether the welcome steps were dismissed, and, for a few minutes at a time, whether the store’s plan is active.

Each order the app brought in, with its scrambled customer code and its payout transactions, is kept 13 months from the order’s date, so a month can be compared with the same month a year before, and then deleted by a daily job, even while the app stays installed.

Uploaded daily ad spend is kept the same 13 months from its day, and you can undo your latest upload at any time. An exact shipping cost you upload for an order goes with that order. The other costs and settings you enter stay until you change them or uninstall the app.

In our database, which Neon hosts in the United States; the app runs on Vercel (both are in section 3 of our Privacy policy and on our Service providers page, with every other company that handles data for us). Tokens and the messages Shopify sends the app are never put in our logs.

Resend, which sends our website’s emails, sends the app’s email reports and alerts. Open and click tracking are a setting on our Resend sending account, which we keep off, so Resend doesn’t record whether an email is opened or its links are clicked; our emails add no tracking pixel and no tracked links of their own.

The app inside your Shopify admin sets no cookies and keeps nothing in your browser. Its dashboard at app.sellerprofitdoctor.com signs you in through Shopify (no password of ours) and keeps you signed in with a cookie holding a random value; we keep only a scrambled copy, with the store it is for, and delete it when it ends (after half a day without use, a week at most, at sign-out or on uninstall). The cookie policy has the details.

Shopify tells us, and we delete the tokens, every order and payout transaction the app brought in, and the costs and settings you entered, at once, with the email addresses, choices and send log for email reports and alerts. We keep only the store’s address and the dates it installed and uninstalled, until Shopify sends its request to erase the store’s data; then we delete those too. Shopify’s delivery IDs go after 7 days, and the codes kept for every store together (section 5) stay, since they hold no store’s data.

When Shopify passes on a customer’s request to delete their data, we delete the scrambled code from every order that has it. When it passes on a request to see their data, we say whether the app holds their code and on how many orders; it holds nothing else about them.

The app’s charges are billed by Shopify, on the store’s Shopify bill. We never see a card.

We never sell the app’s data, share it for advertising or use it for anything but showing you your store’s profit.

When the app starts to read or keep something new, or keeps it for a different time, we change this page first, post it with a new date and say at the top of the page what changed. Our Privacy policy’s section 11 applies here too.

To see or delete what the app holds before you uninstall, email support@sellerprofitdoctor.com. To report a security problem, email security@sellerprofitdoctor.com. Gomorra Labs LLC, a Wyoming limited liability company, runs Seller Profit Doctor and its Shopify app.