Margin Watchdog — Privacy Policy

Last updated: 25 October 2026

Margin Watchdog ("the app", "we") is a Shopify app that detects orders whose profit margin falls below the merchant's configured floor, tags those orders and notifies the merchant. This policy explains what data the app processes, why, and how it is deleted.

Data we process

When a merchant installs the app we process:

Data	Purpose
Shop domain, plan, time zone, currency, shop contact email	Run the app, send the daily summary at 08:00 shop time
App settings (margin floor, fee percentage, tag names, notification channels)	Apply the merchant's rules
Product variant ids, SKUs and unit costs entered by the merchant	Calculate order margin
Order id, order name, line items, discounts, shipping charges, transaction fees, margin figures	Detect and report low-margin orders
Customer display name and email address attached to a flagged order	Show the merchant which order is at risk and answer privacy requests

We do not store raw order payloads, payment card data, or customer addresses. We never sell personal data or use it for advertising.

Why we process it

We process this data solely to provide the app's functionality to the merchant who installed it:

calculating the margin of each order,
adding LOW_MARGIN / LOSS tags to the order,
sending instant and daily notifications configured by the merchant,
answering Shopify privacy webhooks (customers/data_request, customers/redact, shop/redact).

Sharing

Data is shared only with infrastructure providers that are necessary to run the app:

hosting and database providers (application hosting, encrypted database),
an email delivery provider (Resend) for notifications,
the merchant's own Slack incoming webhook, when the merchant configures one.

Retention and deletion

Data is kept while the app is installed.
customers/redact: the customer's name and email are erased from stored alerts.
shop/redact: the shop record, rules, product costs, alerts, daily statistics, digest logs, webhook ledger and sessions are deleted.
Uninstalling the app stops all processing immediately; Shopify sends shop/redact 48 hours after uninstall.

Security

All traffic uses HTTPS. Shopify webhooks are authenticated with HMAC-SHA256 and processed idempotently.
Shopify access tokens are stored server-side and never exposed to the browser.
Access to production data is limited to the app operator.

Security incident response

If a personal data breach is detected, the app operator notifies affected merchants without undue delay (and within 72 hours where required), describes the data involved, and takes containment and remediation steps. Contact: [email protected].

Your rights

Merchants and their customers can request access to, correction of, or deletion of personal data by contacting the app operator at the address below. We respond within 30 days.

Contact

Email: [email protected]

Changes

We may update this policy; the date at the top reflects the latest revision.