Privacy Policy

Last updated: May 13, 2026

Note: This is a template intended as a starting point. Consult a lawyer before relying on it for compliance.

NeoProfit (“we”, “us”, or “our”) is a Shopify application that helps merchants understand their true profit by aggregating order data, costs, and advertising spend. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

When you install NeoProfit, we access the following data from your Shopify store:

• Order data — order totals, line items, shipping costs, payment gateway fees, and refunds. Used to calculate profit per order.
• Product data — product titles, variant IDs, prices, and Shopify inventory costs. Used to calculate cost of goods sold (COGS).
• Shop information — your store domain (myshopify.com URL). Used to associate your settings and data with your account.

We do not collect, store, or process personal information about your customers (such as names, email addresses, or shipping addresses) beyond what is inherently included in order aggregates.

2. Data You Provide

We store the following data that you configure within the app:

• Store settings (credit card fee rates, shipping mode, monthly overhead, tax treatment, ad attribution method)
• Product cost overrides you enter manually
• Ad platform connection tokens (TikTok, Meta/Facebook, Google Ads) — stored encrypted at rest
• Cached ad spend data fetched from connected ad platforms

3. Third-Party Integrations

If you choose to connect an ad platform, we access data from that platform on your behalf:

• TikTok for Business — daily ad spend per account. Governed by TikTok’s Privacy Policy.
• Meta (Facebook & Instagram) Ads — daily ad spend per ad account. Governed by Meta’s Privacy Policy.
• Google Ads — daily ad spend per customer account. Governed by Google’s Privacy Policy.

Connections to these platforms are optional. You can disconnect any integration at any time from the Integrations tab in the app. When disconnected, stored tokens and cached spend data are deleted.

4. How We Use Your Data

• To calculate and display profit, margin, and cost metrics for your store
• To provide period-over-period comparisons and trend analysis
• To allocate ad spend across orders for accurate profit attribution
• To process subscription billing via Shopify’s billing API

We do not sell, rent, or share your data with any third party for marketing purposes.

5. Data Retention

We retain your data for as long as you have NeoProfit installed. When you uninstall the app, we automatically delete all data associated with your store within 48 hours, including: store settings, product cost overrides, ad platform connections, cached ad spend data, and billing records.

6. GDPR & Customer Data Requests

NeoProfit is compliant with Shopify’s mandatory privacy webhooks:

• Customer data requests — we respond to requests for customer data. Since we do not store individual customer records, these requests result in an empty report.
• Customer data erasure — we honor requests to delete customer data. As above, we do not retain identifiable customer records.
• Shop data erasure — upon uninstall and shop redact webhook, all shop data is permanently deleted.

If you are an EU merchant and have questions about your rights under GDPR, please contact us at the address below.

7. Security

All data is stored in a PostgreSQL database hosted on Railway with encryption at rest. All communication between the app and Shopify, and between the app and ad platforms, is encrypted in transit via HTTPS/TLS. OAuth tokens for ad platform connections are stored securely and never exposed to the browser.

8. Cookies & Tracking

NeoProfit is an embedded Shopify admin app. We do not use cookies for tracking or advertising purposes. Shopify’s own session management handles authentication within the admin.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date above. Continued use of the app after changes constitutes acceptance of the updated policy.