Privacy Policy

Overview

By installing and using Profit Sentry through the Shopify App Store, you agree to the practices described in this policy. If you do not agree, please do not install or continue using the app.

What we collect

We collect only the data necessary to deliver the margin protection service. This includes:

• Shopify store information: Your shop domain, store name, and the OAuth access token Shopify issues when you install the app. We use this token solely to read product and pricing data and to update Shopify product prices when you have Auto-Fix mode enabled.
• Shopify product and variant data: Product titles, variant titles, SKUs, and current retail prices for products in your Shopify catalogue that are fulfilled by Printful.
• Printful account data: The OAuth token issued by Printful when you connect your account. We use this token solely to read your Printful product catalogue and current fulfilment costs. We never use it to place orders, modify your Printful account settings, or access payment information.
• Printful cost data: Fulfilment costs for each Printful product variant, used to calculate your current margin.
• Your contact email address: Used to send breach alert notifications and transactional app emails. We do not use your email for marketing without your explicit consent.
• Configuration preferences: Your chosen protection mode (Auto-Fix, Kill Switch, or Alert Only), target margin percentages, and price rounding rules.
• Intervention logs: A record of every automated action Profit Sentry has taken on your behalf (price updates, product drafts, alerts sent), stored so you can audit the app's behaviour.

We do not collect or store: Shopify customer data, order data, payment information, Printful customer data, or any personally identifiable information about your end customers.

How we use your data

We use the data described above for the following purposes only:

• To sync your Shopify product catalogue with your Printful cost data and calculate per-variant margins.
• To monitor for Printful cost changes via webhooks and evaluate whether any change breaches your configured target margin.
• To take the automated action you have configured (update Shopify pricing, set products to Draft, or send an email alert) when a margin breach is detected.
• To display your margin data, intervention history, and product status within the Profit Sentry dashboard.
• To send you transactional emails: breach alerts, sync completion notifications, and account-related messages.
• To troubleshoot issues and maintain service reliability.

We do not sell, rent, or share your data with third parties for advertising or marketing purposes.

Third-party services

Profit Sentry integrates with the following third-party platforms as a core part of its operation:

• Shopify: We access your store data via the official Shopify Admin API under the permissions you grant during installation. Shopify's privacy policy governs how Shopify processes your data: shopify.com/legal/privacy.
• Printful: We access your Printful cost data via the official Printful API. Printful's privacy policy governs how Printful processes your data: printful.com/policies/privacy.
• Supabase: We use Supabase to host our application database securely. Data is encrypted at rest and in transit. Supabase's privacy policy: supabase.com/privacy.
• Email delivery provider: Transactional emails (breach alerts etc.) are delivered via a third-party email service. Only your email address and the content of the notification are shared with this provider for delivery purposes.

Data storage and security

All data is stored on servers located within the European Union and/or the United Kingdom. We use industry-standard security practices including:

• TLS 1.2+ encryption for all data in transit
• Encryption at rest for sensitive tokens and credentials
• Role-based access controls limiting internal access to your data
• Regular security reviews of our infrastructure and dependencies

Your Shopify and Printful OAuth tokens are stored encrypted and are never exposed in logs, error messages, or client-side code.

Data retention

We retain your data for as long as your Profit Sentry subscription is active. When you uninstall Profit Sentry from Shopify:

• Your Shopify OAuth token is immediately revoked and deleted from our systems.
• Your Printful OAuth token is revoked and deleted.
• Your product data, margin history, and configuration settings are deleted within 30 days of uninstall.
• Intervention logs may be retained for up to 90 days for legal and audit purposes, after which they are permanently deleted.

You can request immediate deletion of all your data by contacting us at privacy@profitsentry.app.

Your rights

Depending on your location, you may have the following rights in relation to your personal data:

• Right of access: You can request a copy of the data we hold about you and your store.
• Right to rectification: You can ask us to correct inaccurate data.
• Right to erasure: You can request deletion of your data at any time.
• Right to restriction: You can ask us to restrict processing of your data in certain circumstances.
• Right to portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to certain types of processing.

To exercise any of these rights, please contact us at privacy@profitsentry.app. We will respond within 30 days.

Cookies

The Profit Sentry dashboard (the embedded Shopify app) uses a minimal number of cookies and browser storage mechanisms solely for authentication session management. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

This marketing website (profitsentry.app) does not use any third-party analytics or advertising cookies. A single session cookie may be set for security purposes.

Children's privacy

Profit Sentry is a business application intended for adults operating Shopify stores. We do not knowingly collect data from or about individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us immediately at privacy@profitsentry.app.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email and/or a notice within the Profit Sentry dashboard at least 14 days before the changes take effect. The "Last updated" date at the top of this page will always reflect the most recent revision.

Continued use of Profit Sentry after the effective date of any changes constitutes your acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: privacy@profitsentry.app
• General support: hello@profitsentry.app
• Postal address: Profit Sentry, 123 Business Lane, London, EC1A 1BB, United Kingdom