Profit App Sign in

Privacy policy

Last updated: Jul 5, 2026

This privacy policy describes how we collect, use and protect data when you install our Shopify app or use our dashboard.

For the store data our app syncs, we act as a data processor on behalf of the merchant. The merchant remains the data controller for their customers' personal data.

What data we collect

When you connect your Shopify store, we sync and store the following data to compute your profit analytics:

  • Store information: shop name, domain, contact email, currency and plan.
  • Product catalog: products, variants, SKUs, prices and inventory levels.
  • Orders, refunds and payment transactions, including line items, discounts, taxes, shipping and payment fees.
  • Customer details attached to orders, such as names, email addresses and order addresses.
  • Dashboard account data: your name, email address and team memberships.
  • Settings you enter: product costs, shipping rules and payment fee configuration.
  • Technical data: server logs (such as IP address and browser type) kept for security and troubleshooting.

How we use data

We use this data exclusively to provide the service:

  • Computing profit, cost and inventory analytics for your store.
  • Providing customer support and troubleshooting sync issues.
  • Managing your subscription through Shopify Billing.
  • Securing the service and preventing abuse.

We never sell your data, and we never use your customers' personal data for marketing or profiling.

Legal bases (GDPR)

We process data to perform our contract with you (providing the analytics you signed up for), to pursue our legitimate interest in operating and securing the service, and to comply with legal obligations.

Sharing and subprocessors

We share data only with the infrastructure providers needed to run the service — hosting and database providers, and our email delivery provider for sign-in and notification emails — and with Shopify as part of the app platform. We never sell data to third parties.

Retention and deletion

We keep synced store data for as long as the app is installed, so your analytics keep their history.

When you uninstall the app, we honor Shopify's GDPR webhooks: customer data redaction requests and shop redaction requests lead to permanent deletion of the related personal data from our database, typically within 30 days.

Your rights

Under the GDPR and similar laws you can request access to, correction, deletion, restriction or portability of your personal data, and object to its processing. Contact us to exercise these rights; you can also lodge a complaint with your local data protection authority.

If you are a customer of a store that uses this app, please direct requests to that store — we support merchants in fulfilling them, including through Shopify's customer data request and redaction process.

Security

Data is encrypted in transit (TLS), access is restricted to authorized personnel, and each store's data is isolated by a strict tenant boundary.

Changes to this policy

We may update this policy as the service evolves. Material changes will be announced in the dashboard. The date above always reflects the latest revision.

Contact

For any privacy question or request, contact us at support@geslr.com