ProfitShield

1. Information We Collect

1.1 Shopify Store Data

When you install ProfitShield, we access the following data from your Shopify store through the Shopify API:

• Product data: Product titles, prices, cost of goods (COGS), SKUs, and variant information — used to calculate profit margins.
• Order data: Order details including line items, quantities, discounts, shipping costs, taxes, and transaction fees — used for profitability analysis.
• Customer information: Customer names and email addresses associated with orders — used solely for order identification and display within the application.

1.2 Account Information

We store your Shopify store domain, access tokens for API communication, and any settings or preferences you configure within ProfitShield.

1.3 Calculated Data

We generate and store profitability calculations, margin analyses, and related metrics derived from your store data. This calculated data is stored in our own database and is not written back to your Shopify store.

2. How We Use Your Data

We use your data exclusively for the following purposes:

• Calculating order and product profitability in real time
• Identifying and flagging or blocking unprofitable orders at checkout
• Generating profit analytics, dashboards, and reports
• Providing AI-powered insights and profit optimization suggestions (optional feature)
• Improving the functionality and reliability of ProfitShield

We do not use your data for advertising, marketing to your customers, or any purpose unrelated to profitability analysis.

3. Third-Party Services

3.1 Shopify

ProfitShield integrates with the Shopify API to read your store data. Your use of Shopify is governed by Shopify's Privacy Policy.

3.2 Anthropic (AI Insights)

If you opt in to AI-powered insights, aggregated and anonymized order and product data may be sent to Anthropic's API to generate profitability recommendations. No personally identifiable customer information (names or email addresses) is sent to Anthropic. This feature is entirely optional and can be disabled at any time in your settings.

3.3 Website Analytics and Advertising (public website only)

Our public marketing website (profitshield.app pages such as the home page, pricing and comparison pages) uses Google Tag Manager to load Google Analytics 4 and, only if you accept optional tracking, Google Ads and Meta Pixel measurement. These tools never receive your Shopify store data, order data or customer data; they see only how the public website itself is used. They run in Google Consent Mode: until you choose "Accept optional" in the cookie banner, analytics and advertising storage stay denied and Google receives only cookieless, aggregated measurement pings. You can change or withdraw your choice at any time with the "Cookie settings" button on any marketing page. The embedded Shopify Admin app and the signed-in web app load no analytics or advertising scripts at all.

3.4 No Other Third-Party Sharing

We do not sell, rent, or share your data with any other third parties, and no analytics or advertising service has access to your store data.

4. Data Storage and Security

Your data is stored in a secure PostgreSQL database hosted on infrastructure with industry-standard security measures including:

• Encrypted connections (TLS/SSL) for all data in transit
• Encrypted database storage for data at rest
• Access controls limiting data access to authorized services only
• Regular security updates and monitoring

While we implement commercially reasonable security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your data for as long as you have ProfitShield installed on your Shopify store. Upon uninstallation:

• Your Shopify access tokens are immediately revoked and deleted.
• Your store data and calculated profitability data are deleted within 30 days of uninstallation.
• You may request immediate deletion at any time by contacting us.

6. Your Rights (GDPR and Global Privacy)

Regardless of your location, we provide the following rights to all users:

• Right of Access: You may request a copy of all data we hold about your store. Use the GDPR data export feature in your ProfitShield settings, or contact us directly.
• Right to Deletion: You may request deletion of all your data at any time. Use the GDPR data deletion feature in your settings, or contact us. Deletion is processed within 30 days.
• Right to Portability: You may export your data in a machine-readable format (JSON/CSV) through the data export feature in your settings.
• Right to Rectification: You may update or correct your data through the application settings or by contacting us.
• Right to Object: You may object to specific data processing activities by contacting us.

To exercise any of these rights, contact us at [email protected].

7. Cookies

Inside the Shopify Admin app and the signed-in web app, ProfitShield uses only essential cookies required for authentication and application functionality (session and refresh tokens, your cookie-consent choice, and interface preferences such as theme). No tracking or advertising cookies are set there.

On the public marketing website, optional analytics and advertising cookies (for example Google Analytics _ga/_gid, Google Ads _gcl_*, Meta _fbp/_fbc) are set only after you choose "Accept optional" in the cookie banner. Choosing "Reject optional" or "Withdraw optional" removes them and keeps analytics and advertising storage denied. See section 3.3 for what each service receives.

8. Children's Privacy

ProfitShield is a business-to-business application designed for Shopify store owners. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the application and updating the effective date. Your continued use of ProfitShield after changes are posted constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

JMS Dev Labs
Email: [email protected]