Privacy Policy

This Privacy Policy describes how MHIRI SOFTWARE (“we”, “our”, or “us”) collects, accesses, uses, and safeguards data when Shopify merchants install and interact with the ProfitGuard application (“the App”).

ProfitGuard is designed from the ground up on the principle of data minimization. The App evaluates product profit margins across your Shopify store catalog by contrasting retail prices against inventory unit costs (COGS), payment processing rates, shipping weight tier matrices, and expected return drag. The App does not operate as a customer profiling, marketing, or behavioral tracking system.

To provide SKU profit analysis and facilitate one-click price corrections directly to your live store, ProfitGuard accesses and retains strictly the minimum operational data required:

To automatically detect your store’s true cost structure — fee rates, shipping collection, discount patterns, and refund frequency — ProfitGuard reads a limited, aggregated subset of your order data. This data is consumed once per sync, written to per-variant aggregate fields, and then discarded. No per-customer or per-order records are retained.

Fields we read from each order:

• Line item variant IDs and quantities
• Line item original (list) unit price
• Line item discounted unit price
• Order-level total shipping charged to the buyer
• Currency code (to detect orders settled in a foreign currency)
• Refund line items: quantity refunded and associated variant ID

How we use it:

• Per-variant discount % — derived by comparing list revenue to net revenue across the variant’s orders in the last 30 days.
• Average shipping collected — order-level shipping apportioned by line-item value, then divided by units sold.
• Refund rate — refunded units divided by units sold, only computed when the sample size reaches 50 units.
• Average units per order — used to distribute the fixed payment-processing fee across units.

What we do NOT read or store from orders:

• Customer names, emails, phone numbers, or physical addresses
• Payment card numbers, bank details, or transaction identifiers
• IP addresses, device user agents, or geolocation
• Order notes, tags, or custom attributes containing customer content

All values derived from orders are stored as averages on the associated variant_snapshots row. They are never associated with a customer, order, or session. Uninstall removes them within 48 hours via automated cleanup.

When orders occur in your store, our automated background worker inspects the payload only to read line items (identifying which Variant ID was purchased and how many units were sold). We explicitly bypass, ignore, and discard:

• Customer full names, first names, and last names
• Physical billing, delivery, and residential addresses
• Email addresses and telephone numbers
• IP addresses, device user agents, and geolocation records
• Credit card numbers, bank details, and payment transaction identifiers

We do not sell, license, rent, or trade merchant or store data. Information is processed exclusively via reputable, enterprise-grade infrastructure providers adhering to strict security standards:

• Shopify Inc.: Provides the merchant authorization framework (OAuth 2.0) and Admin GraphQL API used to sync catalog items and write back price revisions.
• Cloud Infrastructure & Databases: Hosted in secure, isolated Linux containers running PostgreSQL for relational persistence and Redis for asynchronous queue state handling.

We employ layered technical and operational safeguards designed to prevent unauthorized access, exposure, or tampering:

• Transport Layer Security (TLS): All web traffic between merchants, Shopify APIs, and ProfitGuard servers is enforced using modern HTTPS/TLS 1.3 encryption.
• Encryption at Rest: Persistent database volumes storing store baseline configurations and catalog snapshots are protected behind firewalled private container networks.
• Access Token Isolation: Shopify offline access tokens are restricted, stored securely via hashed session storage mechanisms, and never exposed to public browser scripts.

Store catalog snapshots, cost overrides, and baseline configurations remain active in our database only while the App remains installed on your store.

In strict adherence to Shopify’s Partner Program requirements and international privacy laws (GDPR, UK GDPR, and CCPA/CPRA):

• Uninstall Webhook: When an app/uninstalled event is received, an automated cleanup worker purges the store record, sessions, cached metrics, and all related catalog snapshots within 48 hours.
• Mandatory GDPR Webhooks: We actively listen to Shopify’s compliance endpoint (/webhooks/compliance). In the event of a shop/redact event, all historical store records are permanently deleted.
• Customer Requests: Because ProfitGuard stores zero customer PII, any customers/data_request or customers/redact payloads receive a direct, verified response confirming that no customer records exist in our database.

As a Shopify merchant using ProfitGuard, you retain full rights over your store information:

• Right of Access: You can view all margin metrics, baselines, and catalog evaluations directly in your Dashboard at any time.
• Right of Export: Pro merchants can export their entire SKU net margin audit as a CSV file for local archival or accounting analysis.
• Right of Rectification: You can edit cost overrides, recalculate baseline percentages, or trigger a complete catalog resync whenever your numbers change.
• Right of Erasure: Uninstalling the App triggers full database deletion. You may also email our support desk at any time to request immediate manual removal of your store profile.

ProfitGuard is owned and operated by MHIRI SOFTWARE. If you have questions regarding this Privacy Policy, our data handling practices, or our compliance posture, please contact us: