Privacy Policy

Last updated: October 8, 2026

What we collect

When you install SmartCash, we access the following data from your Shopify store:

• Order data — order totals, dates, and financial summaries. We do not store individual customer names, emails, or addresses.
• Customer identifiers (read_customers scope) — only the opaque Shopify customer ID, plus Shopify's own per-customer order count and amount spent. We use these to report your customer total, customer lifetime value, cohorts, and repeat-purchase rate. We do not read customer names, email addresses, phone numbers, or addresses.
• Product data — product titles and categories for mapping to financial categories.
• Store information — your store name, domain, currency, and the store's contact email address as recorded in Shopify, for display, configuration, and account support.

How we use it

Your data is used to provide SmartCash's cashflow management features: dashboards, reports, forecasts, and scenario analysis. We do not sell or rent merchant data. Infrastructure providers process data only as needed to operate the service.

Data storage and security

Data is stored in a PostgreSQL database that our hosting provider encrypts at rest at the storage level. Shopify access tokens are additionally encrypted with AES-256-GCM in the app before they are stored. Communication between your browser, Shopify, and our servers is encrypted using HTTPS/TLS.

Data retention

After uninstall, Shopify sends SmartCash a shop-redaction webhook. The verified redaction transaction removes the store integration record, credentials, order links, customer aggregates, and connected integration data. You can also request deletion by contacting [email protected].

GDPR compliance

SmartCash complies with the General Data Protection Regulation (GDPR). We handle all mandatory Shopify compliance webhooks for customer data requests, customer data erasure, and shop data erasure. You have the right to access, correct, or delete your data at any time.

Cookies

SmartCash uses essential session cookies required for authentication within the Shopify admin. We do not use tracking cookies or third-party analytics on the embedded app.

Third-party services

SmartCash uses the following third-party services:

• Shopify — for managed app billing and authorized store data access
• Railway — for application and database hosting
• Sentry — for diagnostic error monitoring when configured

Contact

For privacy-related questions, contact us at [email protected].