LeakAudit Privacy Policy

Last updated: draft — replace this date when you publish.

LeakAudit ("the App") is a Shopify app that scans store data to identify potential sources of lost revenue. This policy explains what data the App accesses, why, and how it's handled.

What we access

The App requests read-only access to:

• Orders — order totals, currency, dates, and refund amounts, to estimate FX drag and return-rate trends. We do not access customer names, emails, addresses, or payment details.
• Products — prices, costs, and inventory levels, to identify SKUs selling below your target margin.
• Themes — your published theme's code, to detect leftover snippets from apps you may have uninstalled.
• Payouts — payment payout data, to estimate payment processing and currency-conversion costs.

The App never writes to, modifies, or deletes anything in your store.

What we store

We store your shop domain, your app settings (shipping cost assumption, target margin, and an optional notification email you provide), your session token, and a history of past scan results (health score and estimated monthly leak amount) so we can show you a trend over time. We do not store customer personal data.

Data sharing

We do not sell or share your data with third parties. Data is used solely to power the App's own dashboard for your store.

Data retention and deletion

If you uninstall the App, your stored settings and scan history are deleted. You can request deletion of your data at any time by contacting us (see below) — this is also handled automatically via Shopify's mandatory GDPR compliance webhooks.

Your rights (GDPR/CCPA)

You can request access to, correction of, or deletion of the data we hold about your shop at any time by contacting us below. Uninstalling the App triggers Shopify's mandatory compliance webhooks, which cause us to automatically and permanently delete every record we hold for your shop — settings, scan history, and feedback messages alike — typically within 48 hours.

Contact

Questions about this policy or your data can be sent to: [add your support email here].