Stats Compass for Shopify: privacy policy

This policy explains what the Stats Compass app for Shopify ("the app") does with information from your store, and with the weekly report email it sends. "We" means Stats Compass, operated by Inference Labs in the United Kingdom. Questions: tunji@statscompass.io.

Our data processing terms, part of the Stats Compass Commerce terms, set out how we handle your store's information on your behalf.

What we collect

When you install the app, you give it read-only access to your store's orders (including their full history), products and customers. It cannot change anything in your store. From that access, and from you, we keep:

• Orders: dates, amounts and currency, line items and quantities, discounts, discount codes and the names of automatic discounts, refunds, the payment gateway, order tags and sales channel, and whether an order was a test. We keep each order as Shopify's API returned it, so that every figure can be recalculated and checked. Of the notice Shopify sends us when an order changes, we keep only the order's identifier and times.
• Products: products and their variants, and the costs recorded in Shopify.
• Customers: only Shopify's identifier for each customer, how many orders they have placed, and when their customer record was created. We do not request or store your customers' names, email addresses, phone numbers or postal addresses.
• Your store: its domain, name, currency, timezone and language.
• Your settings: your default margin, payment fee rules, subscription-order rules, and the email addresses, day and time you choose for the weekly report.
• Changes you make: a record of each settings change, with the Shopify staff account that made it.
• The weekly report: each report we compose, and whether each email was sent, bounced, marked as spam or unsubscribed from.
• Your plan: which plan you are on and its status, as Shopify reports it. Payments are made through Shopify. We never see card or bank details.
• If you connect an AI assistant (optional): a scrambled (hashed) form of your Stats Compass login's identifier, so the connection knows which stores are yours.

We do not keep the store owner's name, email address, phone number or address.

How we use it

• To work out your store's figures: revenue, orders, margins, promotions, seasonality and forecasts. We show them in the app and in the weekly report.
• To send the weekly report to the addresses you choose, and to stop sending to anyone who unsubscribes or whose mail bounces.
• To bill you through Shopify, for the plan you choose.
• To answer your AI assistant's questions, if you connect one.
• To keep the service working and secure.

We do not sell your data, use it for advertising, or use it to train AI models.

Connecting an AI assistant is optional. If you connect the app to your Stats Compass account and ask an AI assistant, such as Claude, about your store, the assistant can load your store's order data into a session on our servers to answer you. That data includes order dates and amounts, discount codes, refunds, the products and costs on each order, and Shopify's identifier for each customer, but never a customer's name or contact details. What it works out, which can include individual orders, is sent to the assistant. That happens only when you ask. What the assistant's provider does with it is governed by your agreement with them. The session's data is removed after 24 hours of inactivity, as our data tools privacy policy describes.

Who helps us run it

• DigitalOcean: our servers, database and file storage, in London, UK.
• Resend: delivers the weekly report email.
• Shopify: the platform the app runs in, and billing.
• Auth0: the Stats Compass login, if you connect an AI assistant.

How long we keep it

• While the app is installed.
• After you uninstall: we delete everything we hold for your store, both data and files, 30 days after you uninstall, unless you reinstall first. Shopify also asks us to do this, about two days after you uninstall.
• Backups are kept for 30 days, so deleted data leaves our backups within a further 30 days.
• Report charts: the charts in a report email are images at long, unguessable web addresses, so your email can display them. They are deleted with the rest of your store's data, as described above.

Requests from your customers

We process your store's information on your behalf. When one of your customers asks Shopify for their data, or for it to be deleted, Shopify passes the request to us.

• Their data: we hold that customer's Shopify identifier, the date of their first order, when their Shopify customer record was created, how many orders they have placed, and their orders, all of which you can also see in Shopify. Ask us and we will send you what we hold.
• Deletion: we replace their Shopify identifier with a random one everywhere we keep it. Their orders stay, so your store's figures don't change, but we no longer hold Shopify's identifier for them. Our backups still hold it for up to 30 days.

Security

• In transit: information moving between Shopify, the app and you is encrypted.
• Shopify's access to your store: the key the app uses is stored encrypted.
• Separation: each store's data is kept apart from every other store's by the database itself.
• Read-only: the app's access to your store is read-only.

Your choices

• Change the report's recipients, or stop it, in the app's Settings at any time.
• Every report has an unsubscribe link.
• Ask us to delete your store's data from Settings → Your data, or by email.
• Uninstalling deletes your store's data as described above.

Changes

If this policy changes, we will update this page and its date.