Privacy Policy

ProfitPeek ("we", "our", or "us") provides a Shopify application designed to help merchants calculate their real-time net profit. This Privacy Policy details precisely what data we collect, how it is encrypted, how it is used, and how it is permanently destroyed when you uninstall our app. This policy strictly complies with Shopify's Partner Program Agreement and all global data protection regulations (including GDPR and CCPA).

1. The Data We Collect (And What We Don't)

When you install ProfitPeek on your Shopify store, you explicitly grant us access to specific API scopes.

• Shop Metadata: We collect your `.myshopify.com` domain, your shop's currency formatting, and the primary email address on file. We use this to create your ProfitPeek account and send critical app notifications.
• Order & Financial Totals: To calculate profit, we read the financial totals of your orders (subtotal, shipping cost, taxes, discount applied).
  Important: We automatically strip out Customer Names, Physical Addresses, IP Addresses, and Phone Numbers before the data ever reaches our database.
• Product & Inventory Costs: We read your product catalog to identify Cost of Goods Sold (COGS) so we can accurately deduct product costs from your revenue.

2. Third-Party Integrations (Ad Networks)

If you choose to connect third-party ad networks (e.g., Facebook Ads, Google Ads, TikTok Ads) to ProfitPeek, we authenticate via secure OAuth. We only request read-only permissions to query your daily "Ad Spend" metrics. We cannot create, edit, or delete your ad campaigns. You can revoke this access at any time from your ProfitPeek dashboard.

3. How Your Data is Protected

We treat your financial data like bank data. We employ enterprise-grade security measures:

• Encryption at Rest: All database records are encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between Shopify, your browser, and our servers is secured via TLS 1.3 (HTTPS).
• No Third-Party Tracking: We do not use third-party tracking pixels (like Facebook Pixel) inside the ProfitPeek dashboard. Your financial numbers are completely hidden from advertising networks.

4. Data Retention and Deletion (GDPR)

You have the absolute right to be forgotten.

Upon Uninstallation: The moment you uninstall ProfitPeek from your Shopify admin, a mandatory webhook is triggered. According to Shopify's data retention requirements, your data will be automatically and permanently purged from our active databases within 48 hours.

Manual Deletion Requests: At any time, you can email us to request a manual hard-deletion of your account and all associated metrics prior to uninstallation. We will execute this within 24 hours.

5. Policy Updates

We may update our Privacy Policy periodically to reflect changes in regulatory standards or our API architecture. We will never change our policy to sell your data. Material changes will be communicated directly via the email address associated with your Shopify account.

6. Contact the Data Protection Officer

If you have specific concerns regarding data compliance, GDPR requests, or security vulnerabilities, please contact our Data Protection Officer directly:

Email: [email protected]