Last updated: 20 October 2026
AppVerix Profit (“the app”) is published by AppVerix (“we”, “us”). This policy explains what the app collects when a merchant installs it, why, where it is kept, and how to have it deleted.
The app stores customer IDs only. It does not store names, emails, phone numbers or addresses. For any customer data that stays on the commerce platform, the merchant is the controller.
Shop domain, currency, timezone and locale, so the dashboard can open in the right language and money format. An access token so the app can stay installed and read orders, products and inventory costs. Order, line, refund, cost, fee, shipping, custom-cost and ad-spend records used to build profit. Customer IDs on first-order and LTV tables. Encrypted ad-connector tokens when you connect an account.
We do not collect payment card data, browsing data, or advertising cookies. We do not sell or share personal data.
Cloudflare hosts the app and the D1 database. The commerce platform already holds shop and order data and handles billing. Ad platforms see tokens only if you connect them. Email delivery (when you turn on the digest) sees the address you enter.
Shop records while the app is installed. On uninstall we delete the login session immediately. After a shop/redact request we delete all rows for that shop, including ad tokens. On customers/redact we remove that customer ID from order facts. Server logs are kept for up to 7 days.
The app handles the three mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact. Merchants can also email support@appverix.com. We answer within 30 days.
HTTPS in transit. D1 encrypted at rest. Webhooks verified with HMAC. Ad tokens encrypted with a worker secret. Admin requests checked with a session token.
AppVerix. Email: support@appverix.com