LayerCost Privacy Policy
Last updated: [TO COMPLETE: publication date]
LayerCost ("the App", "we", "us") is a Shopify app operated by [TO COMPLETE: legal name of the operator], [TO COMPLETE: postal address]. This policy explains what information the App collects when a merchant installs it, how we use it, and how we delete it. Our Terms of Service also apply.
1. Information we collect
When you install the App, you authorize it through Shopify to read products, inventory, orders and locations (read-only scopes). The App stores only what it needs to value your inventory:
- Store information: your myshopify.com domain, time zone, currency, the costing method you choose (FIFO or weighted average cost), your LayerCost plan, and install and uninstall dates.
- Product and inventory information: product, variant and inventory item IDs, SKUs, product and variant titles, whether inventory is tracked, the cost per item, and on-hand quantities.
- Order and refund information: order, line item, refund, product, variant and location IDs, quantities, dates, and financial, fulfillment and restock status.
- Data we calculate: cost layers, consumption records, average cost, and daily inventory value snapshots.
- Billing information: the name and status of your LayerCost subscription, as reported by Shopify. Payments are handled by Shopify; we never see card details.
- Product usage events: for example, installs, setup completed and reports exported, recorded in our own database without third-party trackers.
- Access token: the token Shopify issues to the App. It is encrypted at rest with AES-256-GCM.
2. Information we do not store
LayerCost does not store personal information about your customers: no names, email addresses, phone numbers, postal addresses or payment details. Shopify order and refund notifications may contain customer fields. The App discards those fields as the notification is received, before anything is written to storage, and keeps only the IDs, quantities, dates and statuses listed above. We do not store the names or email addresses of your staff.
3. How we use information
We use this information only to provide the App:
- to calculate FIFO and weighted average inventory values and cost of goods sold;
- to take daily snapshots and generate reports;
- to apply your plan limits;
- to detect and fix errors;
- to improve the App using aggregated usage events.
We do not sell or rent information. We do not use it for advertising, and we do not use it to make automated decisions about individuals.
4. Service providers
We use the following providers to run the App. They process data only on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Shopify | Platform, authentication, billing | [TO COMPLETE: Shopify data location] |
| Render | Application hosting | United States (Ohio) |
| Neon | Database (PostgreSQL) | United States (AWS us-east-2, Ohio) |
| Sentry | Error monitoring. Receives technical error details only, without request bodies, headers, cookies or user information | [TO COMPLETE: Sentry data region] |
| Resend | Operational alert emails to the App's operator only. These contain no customer information | [TO COMPLETE: Resend data region] |
5. Data retention
- Daily snapshots are kept according to your plan: 30 days (Free), 24 months (Starter) or without a limit (Pro). After a downgrade, older snapshots are kept for 30 more days before the shorter limit applies.
- Shopify notifications we received are deleted 30 days after they are processed, or 90 days after a final processing failure.
- Cost layers, consumption records and store settings are kept while the App is installed.
- Error reports in Sentry are kept for up to 30 days.
- Database backups: point-in-time recovery for up to 6 hours.
6. Uninstalling and deletion
When you uninstall the App, it stops processing your store's data immediately. Shopify sends a store deletion request (shop/redact) 48 hours after uninstall. When we receive it, we delete all data for your store from our database: cost layers, snapshots, reports data, notifications, usage events and access tokens. Copies in backups expire on the schedule in section 5. If you reinstall before the deletion request arrives, your existing data is kept.
7. Customer privacy requests
We honor Shopify's mandatory privacy webhooks. Because we do not store your customers' personal information, a customer data request (customers/data_request) has no personal data to return, and a customer erasure request (customers/redact) has no personal data to delete. We record only that the request was received, with no customer details.
8. Security
- Data is encrypted in transit (HTTPS/TLS).
- Access tokens are encrypted at rest.
- Every request from Shopify is verified (HMAC signatures and session tokens).
- Secrets are kept in environment variables, never in code.
- Access to production systems is limited to the App's operator.
9. Your rights
For your store's data, you, the merchant, are the controller and we act as your processor. You can contact us to access, correct or delete your store's data. Your customers should contact you directly; we will help you respond to their requests. Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you may have additional rights.
10. Changes
We will post any changes on this page and update the date above.
11. Contact
[TO COMPLETE: legal name of the operator]
[TO COMPLETE: postal address]
Email: [TO COMPLETE: support email]