Privacy policy

Information we use

The app requests Shopify's read_products permission to match receipt rows with product variants. This can include variant identifiers, SKUs, product titles and images. Shopify authentication provides shop details, staff identifiers, names, email addresses, authentication tokens and session information. We do not request Shopify customer or order data.

You may enter supplier names and references, receipt CSV rows and quantities, claim reasons and amounts, submission and reply references, credit promises, manually recorded settlements, reversals and internal review notes. The app keeps team roles and an audit history. Please avoid unnecessary personal information in free-text fields or CSV files. The app does not accept invoice attachments.

How we use information

We use this information to authenticate users, match receipt items, maintain the supplier claim and credit ledger, apply plan allowances and team roles, show audit history, provide exports and respond to support or privacy requests. Shopify handles app pricing and billing.

SupplierClaim records the supplier communications and credits that you enter. It does not send supplier messages or email/SMS reminders, change Shopify inventory or transfer money.

Services and data location

We use Shopify for authentication, product data, billing and required privacy requests. DigitalOcean hosts the app and its database in the New York City region, United States. Messages sent to our contact email are processed through Gmail. We do not use a separate analytics, marketing or support platform for app data. This policy page uses no tracking or external fonts.

Retention, export and deletion

Ledger records remain available while you use the app. The current app does not automatically delete records by age. Archiving a supplier preserves past records. If subscription access expires or cannot be confirmed, existing ledger records remain readable and exportable. CSV exports from Plans are record extracts, not complete database backups.

On uninstall, the app removes stored Shopify sessions and marks the installation inactive. Uninstall alone does not immediately erase the ledger. When Shopify sends an applicable shop-data deletion request, the app removes that shop's ledger and related app records. A reinstall can affect whether Shopify sends that later request; requests for an older installation are distinguished from the current installation. You can also contact us directly to request deletion.

Limited non-identifying webhook processing receipts remain to avoid duplicate processing. Because the app does not collect Shopify customer or order records, Shopify customer-data requests have no matching customer or order records in the app. Personal information that you enter into ledger text can still be addressed through a verified privacy request.

The current database service has no automatic backup. Hosting logs are subject to DigitalOcean's retention practices; this policy does not specify a fixed runtime-log retention period.

Privacy requests

Email [email protected] to request access to, correction of or deletion of information associated with your shop. Include your shop domain and a description of your request. Do not send passwords, authentication tokens or private invoices.

We verify your authority for the Shopify shop before acting and handle requests through this email contact. This policy does not promise a fixed response period.

Policy updates

When this policy changes, we update this page and the date shown above.