Privacy Policy

Simple Stats is a Shopify app. This policy explains what store and account data we process to run it, why, how long we keep it, and your rights. We don't sell your data and we don't use it for advertising.

What we process

• Store data (read-only) — your orders, products, and customers, read through Shopify's API under the permissions you grant at install. We use this only to compute your metrics and daily summary; we never request permission to write to your store, theme, or checkout.
• Install & account info — your shop domain, install date, and current plan, so the app knows which store it's serving and which features are unlocked.
• Computed metrics & narratives — the revenue/order/AOV/repeat-rate figures and plain-English summaries Simple Stats generates from your store data, stored so your dashboard and (on Standard) history load instantly.
• Operational logs — request and error logs used to keep the service reliable and to diagnose problems, kept briefly.
• Aggregate analytics — privacy-preserving, non-identifying usage metrics about the app and this site; we don't build advertising profiles from them.

Why we process it

We process store and account data to perform our contract with you — installing and running the app you added to your store. Operational logs and aggregate analytics rely on our legitimate interest in keeping the service reliable, secure, and improving over time.

How long we keep it

• Store data read from Shopify — processed to compute your metrics; on the free plan, only a rolling 30-day window is retained, and on Standard, history accumulates for as long as you're subscribed.
• Computed metrics & narratives — retained while the app is installed, so history and comparisons keep working; deleted on uninstall as described below.
• Operational logs — a rolling window of about 30 days.
• Install & account info — retained while the app is installed and briefly after, for billing and support records.

Uninstalling and data deletion

When you uninstall Simple Stats, or when Shopify sends the mandatory customers/data_request, customers/redact, or shop/redact webhooks on your behalf, we act on them within the timeframe Shopify's developer requirements specify, deleting or anonymizing the corresponding data. You can also email us directly at any time to request deletion sooner.

Sub-processors

We rely on a small number of infrastructure providers — for hosting and compute, and for outbound email — to run the Service. They process data only to provide those services to us, under confidentiality and data-protection terms.

What we don't do

We don't sell or rent your store's data. We don't use it for advertising or profiling, and we don't use it to train any AI model — the plain-English summaries are generated by fixed, auditable rules over your own precomputed metrics, not a model that learns from merchant data. We don't add you to a newsletter unless you explicitly opt in.

Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your data, to object to certain processing, and to withdraw consent. California residents may request the categories of data we hold and ask us not to sell it — we don't sell personal information. To exercise any right, email hello@keelhelm.com; we'll verify and respond within the time the law allows.

International transfers

Your data may be processed in the United States and other countries where our infrastructure providers operate.

Security & children

We protect data with reasonable technical and organizational measures. The Service is a business tool for Shopify merchants and isn't directed to children under 16; we don't knowingly collect their data.

Changes

If we make a material change, we'll update the version and date above and, where appropriate, notify you by email.

Contact

Questions or requests: hello@keelhelm.com.