Privacy Policy

Account Credentials — Email address and basic profile information when you register.

Store Integration Data — Synced orders, products, refunds, and shipping costs from connected platforms (Shopify, WooCommerce, eBay, Amazon).

Marketing API Data — Ad campaigns, clicks, and daily ad spend from Meta Ads, Google Ads, and TikTok Ads — pulled in read-only mode to calculate your ROAS, AOV, and P&L metrics.

Customer name — used only as the order's display name in your dashboard and to flag repeat-return customers (return-risk scoring).

City (from the shipping or billing address) — used only for courier-by-city delivery and return analytics.

We do NOT collect, store, or process customer email addresses, phone numbers, or street/postal addresses from your store.

Operate and maintain Profit & Loss dashboards.

Calculate marketing campaign Return on Ad Spend (ROAS).

Estimate COGS margins, courier delivery ratios, and platform fees.

Generate automated financial reports and AI insights for your connected stores.

Encryption in transit — all traffic is served over HTTPS/TLS.

Encryption at rest — API credentials (Meta system tokens, Shopify access/refresh tokens) are encrypted with AES-256-GCM before storage. The database is encrypted at rest by our database provider, and nightly backups are encrypted by ProfitIQ (AES-256) before they are stored.

Tenant isolation — zero-trust, row-level isolation enforced per account, so your data is never co-mingled with other tenants.

Access controls — staff access to production data is restricted to authorized personnel, access to personal data is logged, and staff accounts require strong passwords. Test and production data are kept separate.

Governance — we maintain an access control policy, a data retention policy, a data-loss-prevention strategy, and a security incident response policy.

Access/refresh tokens are retained while an integration is connected and deleted when you disconnect or uninstall the app.

Order records (used for your financial history) are retained in your ProfitIQ account until you delete them or close your account. You can erase them yourself at any time from Settings → "Delete my data" — we do not impose a minimum retention period on your own records.

On uninstall, Shopify sends a shop/redact request 48 hours later; we then delete the store's stored credentials and connection. Customer redaction requests are applied as described below.

Deleted data remains only in our encrypted nightly backups, which are deleted after 14 days.

When an account is deleted, we keep a record that the deletion was asked for and carried out: identifiers and dates only, with no name, email address or business data.

Supabase — database, sign-in and file storage, in Tokyo, Japan. Holds all account and business data.

Vercel — hosts the website and app; its functions run in Tokyo, Japan, and the sign-in check at the start of each request runs in Vercel's region nearest you. Vercel Speed Insights measures how fast our pages load, without cookies.

Google Cloud (Google LLC) — our API and background worker (Cloud Run) and scheduled syncs (Cloud Tasks, Cloud Scheduler), in Tokyo, Japan, plus key storage (Secret Manager) and alerts (Cloud Monitoring). Starts each business's nightly syncs and records their results.

Upstash — a short-lived cache in Tokyo, Japan. Holds your profile, business settings and dashboard figures for up to five minutes, and request counters for rate limiting.

Google Gemini API (Google LLC) — the AI features (insights, assistant, forecasts, ad copy, support-reply drafts). Receives the figures a feature needs (orders, products, costs, ad spend) and, for a support-reply draft, the customer message you paste in and that order's customer name, status and notes. We use Google's paid Gemini API, under whose terms Google does not use these requests or its answers to improve its products.

Resend — sends account emails (sign-up, team invitations, the weekly digest, service notices). Receives your email address and the content of those emails.

Sentry (Functional Software, Inc.) — error monitoring, United States. Receives technical details of errors; IP addresses, cookies, request bodies and email addresses are removed first.

GitHub (GitHub, Inc.) — makes our nightly database backup and stores it for 14 days, encrypted (AES-256) with a passphrase set by ProfitIQ.

Delete it yourself — Settings → "Delete my data". Choose what to erase (orders and shipments, products and inventory, marketing and campaigns, customers, suppliers, AI insights, or everything) and it is permanently removed from our database immediately. Deleting "everything" also removes your stored store and ad-platform credentials. Deletion is irreversible and cannot be restored. This action is available to the account owner.

Disconnect Integrations — Settings → E-commerce Stores or Marketing & Ad Accounts → "Disconnect" immediately invalidates stored API tokens and halts syncing, while keeping your historical records.

Delete your account — Account (at the bottom of the menu) → “Delete my account”, in the app or on the website. An owner's account is deleted with the whole business and every teammate's login; a teammate's deletes only their own login. The account is locked at once, and permanently deleted 14 days later unless you sign in and cancel. Can't sign in? Email support@profitiq.tech from your registered address with the subject “Delete my account”; we confirm it with you and the account is deleted within 14 days. Full details: https://www.profitiq.tech/delete-account.