Stats Compass Commerce terms
Last updated: 23 October 2026
These terms are an agreement between you, the business that installs Stats Compass Commerce on a Shopify store, and Inference Labs Limited ("we", "us"), the company that runs Stats Compass. They cover the Stats Compass app for Shopify ("the app").
- Part 1 covers using the app.
- Part 2 is our data processing agreement: how we handle the personal data in your store's information on your behalf.
- Our privacy policy explains, in plain terms, what the app collects and why.
Questions: tunji@statscompass.io. Inference Labs Limited is registered in England and Wales, company number 13138720.
Part 1: Using the app
1. Agreeing to these terms
Someone at your store agrees to these terms for the business by choosing Agree in the app, which asks the first time the app is opened. We record which Shopify staff account agreed, to which version of these terms, and when. Whoever agrees confirms they are allowed to agree for the business. The app is for businesses, not for personal use.
2. What the app does
The app reads your store's orders, products and customers through Shopify, with read-only access: it cannot change anything in your store. It works out your store's figures, judges each one against your store's own history, and shows the results in the app and in a weekly report email. If you choose, you can also connect an AI assistant and ask it about your store.
3. Price
The app is free during early access. If we introduce paid plans, we will tell you first. You choose a plan in the app, Shopify bills it, and nothing is charged unless you approve the charge in Shopify.
4. Your part
You agree to:
- use the app lawfully, and only for your own store;
- keep your settings, such as product costs, your default margin and the weekly report's recipients, accurate, because the figures depend on them;
- not try to get around the app's security, or reach another store's data.
You decide what to do with the app's figures. They are statistical estimates from your store's history, shown with their ranges. They are not financial, tax or legal advice.
5. Our part
We work to keep the app's figures correct and reproducible, and the app available. We cannot promise it will always be available or free of errors, especially during early access. We may change or remove features, and we may pause the app for a store when we need to, for example to protect its data.
6. Who owns what
You own your store's data. We own the app, its software and its content. You give us permission to use your store's data only to provide the app to you, as Part 2 sets out.
7. Changes to these terms
If we change these terms, we will update this page and its date. For a change that matters, we will also tell you, as section 11 describes, at least 30 days before it takes effect, and the app will ask you to agree to the new version. If you don't agree, you can stop using the app and uninstall it.
8. Ending
You can stop using the app at any time by uninstalling it. We can end your use of the app if you break these terms, or if we stop offering the app, with reasonable notice where we can give it. When the app is uninstalled, your store's data is deleted as section 16 describes.
9. Liability
Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be limited by law.
Otherwise:
- neither of us is liable for indirect or consequential loss, or for loss of profit, revenue or business;
- our total liability to you under these terms is limited to the greater of the fees you paid us in the 12 months before the claim and £100.
10. Law and disputes
These terms are governed by the law of England and Wales, and the courts of England and Wales decide any dispute about them. Please contact us first; most problems are quicker to settle by email.
11. General
- These terms, with our privacy policy, are the whole agreement between us about the app.
- If part of these terms cannot be enforced, the rest still applies.
- No one else has rights under these terms.
- We may transfer these terms to a business that takes over the app, and we will tell you if we do. Part 2 continues to protect your store's data.
- We send you notices in the app, by email to the weekly report's recipients, or through Shopify. You can send notices to tunji@statscompass.io.
Part 2: Data processing
12. Roles and purpose
For the personal data in your store's information, you are the controller and we are your processor. We process it under UK data protection law (the UK GDPR and the Data Protection Act 2018), and under the EU GDPR where that applies to you.
We process it only to:
- work out your store's figures, judge them against your store's own history, and show them in the app and in the weekly report;
- answer your AI assistant's questions about your store, if you connect one, and only when you ask.
We do not sell it, use it for advertising, use it to train AI models, or combine it with other stores' data. These terms, your settings in the app, and the features you choose to use are your instructions to us. If we think an instruction breaks data protection law, we will tell you.
We process it for as long as the app is installed, and then until it is deleted as section 16 describes.
13. What we process
About your customers:
- Shopify's identifier for each customer, how many orders they have placed, and when their customer record was created;
- their orders: dates, amounts and currency, products and quantities, discounts, discount codes and the names of automatic discounts, refunds, the payment gateway, order tags and sales channel, and whether an order was a test.
We do not request or store your customers' names, email addresses, phone numbers or postal addresses. We do not process special category data.
About your staff: the Shopify staff account that changes a setting, and the email addresses you enter to receive the weekly report.
Not personal data, listed for completeness: your products, their variants and their costs, and your store's settings.
14. Keeping it safe
- In transit: information moving between Shopify, the app and you is encrypted (TLS).
- At rest: the database, stored files and backups are stored encrypted.
- Your store's access key: the key the app uses to read your store is stored encrypted.
- Separation: each store's data is kept apart from every other store's by the database itself (row-level security), and each part of the app has only the database access it needs.
- Read-only: the app cannot change anything in your store.
- People: only the people who run the service can reach your data, and they are bound to keep it confidential.
15. Our subprocessors
We use these providers to run the app. Each processes data only to provide its service to us.
| Provider | What it does | Where |
|---|---|---|
| DigitalOcean | Our servers, database, file storage and backups | London, UK |
| Resend | Sends the weekly report email: the report and its recipients' addresses | Its EU region (Ireland) |
| Auth0 (Okta) | The Stats Compass login, only if you connect an AI assistant | United States |
| Shopify | The platform the app runs in, and billing | Under Shopify's own terms with you |
We will tell you at least 30 days before we add or replace a subprocessor, by updating this page and telling you as section 11 describes. If you object, you can stop using the app and uninstall it.
Outside the UK: your store's data is stored in the UK. The Stats Compass login, if you connect an AI assistant, is held by Auth0 in the United States. Some other providers are based in, or may access data from, other countries; DigitalOcean and Resend are also US companies. Where personal data leaves the UK, we rely on the UK's adequacy regulations (which cover the EU) or, for the United States, on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or on the UK's International Data Transfer Addendum.
Your AI assistant: if you connect one and ask it about your store, your store's order data is loaded into a session on our servers to answer you, and removed after 24 hours of inactivity. What the assistant works out, which can include individual orders, goes to the assistant you chose. Its provider is not our subprocessor: you choose it, under your own agreement with them.
16. Retention and deletion
- While the app is installed, we keep your store's data so the figures can be calculated and checked.
- After you uninstall, we delete everything we hold for your store, both data and files, including the charts in past report emails, 30 days after you uninstall, unless you reinstall first. Shopify also asks us to delete it, about two days after you uninstall.
- Backups are kept for 30 days, so deleted data leaves our backups within a further 30 days.
- Sooner: you can ask us to delete your store's data from Settings → Your data, or by email.
17. Helping you with your obligations
Your customers' requests. When one of your customers asks Shopify for their data, or for it to be deleted, Shopify passes the request to us.
- A data request: we hold that customer's Shopify identifier, the date of their first order, when their Shopify customer record was created, how many orders they have placed, and their orders, all of which you can also see in Shopify. Ask us and we will send you what we hold.
- A deletion request: we replace their Shopify identifier with a random one everywhere we keep it. Their orders stay, so your store's figures don't change, but we no longer hold Shopify's identifier for them. Our backups still hold it for up to 30 days.
We will also give you reasonable help with data protection impact assessments, and with questions from a data protection authority, about the app's processing.
Breaches. If a personal data breach affects your store's data, we will tell you without undue delay, and in any case within 48 hours of becoming aware of it. We will say what happened, what data is affected, what it may mean, and what we are doing about it, and we will keep you updated as we learn more.
Showing we comply. We will give you the information you reasonably need to show that we meet these terms. You may audit our compliance once a year, on 30 days' written notice, at your own cost, without disrupting the service, and under confidentiality. Where we can, we will answer an audit with documents instead.
18. If the parts conflict
If anything in Part 1 conflicts with Part 2 about personal data, Part 2 wins.
← Back to Home