ProfitLeak is a Shopify app that analyzes merchant order and product-cost evidence to identify verified product-margin leakage, monitor recurrence, and support merchant-approved checkout protection.
ProfitLeak processes the minimum Shopify data required for its economic audit functions. This can include shop domain, Shopify installation/session data, order and line-item identifiers, order timestamps and financial or fulfillment status, quantities, original prices, discount allocations, product variant identifiers, inventory-item identifiers, inventory-item update timestamps, unit cost, and shop currency.
ProfitLeak does not intentionally request customer name, customer email address, customer phone number, billing address, shipping address, customer account ID, payment-card data, or customer passwords.
If a merchant enables email alerts, ProfitLeak also stores the alert email address supplied by that merchant.
Data is used only to calculate and document verified margin leakage, distinguish verified findings from data gaps, build recurring Case Files, monitor new evidence, verify corrective actions, generate merchant reports and alerts, support billing entitlements, and enforce merchant-approved Margin Firewall rules.
ProfitLeak does not sell merchant or customer data. Data may be processed by Shopify and by infrastructure or email-delivery providers used to operate the service, solely as needed to provide ProfitLeak.
ProfitLeak retains app data only for as long as needed to provide the service and maintain its evidence trail. Shopify privacy webhooks are supported. Customer redaction requests delete order-linked ProfitLeak records for the order identifiers supplied by Shopify. Shop redaction requests delete the shop's persisted ProfitLeak data.
Production deployments are designed to use HTTPS/TLS, managed secret storage, access-controlled infrastructure, and encrypted persistent database storage. Secrets are not stored in the application source repository.
When Shopify sends a customer data request, ProfitLeak records the request identifier and the order identifiers supplied by Shopify so the merchant can download a report of ProfitLeak records linked to those orders.
For privacy questions or requests, contact mascia.luciani79@gmail.com.
This policy may be updated when ProfitLeak's features, providers, or legal requirements change. The effective date above identifies the current version.