Legal
Privacy policy
Last updated 17 October 2026
In short
- We read your store's financial data to calculate your profit. We never collect your customers' names, emails, phone numbers or addresses.
- The only customer detail we use is Shopify's customer ID, to tell new buyers from returning ones.
- We don't sell data, show ads or use your data for anything except running profit.broker for you.
- Your data is stored in Frankfurt, Germany, and deleted when you uninstall the app.
1. Who we are
profit.broker is operated by Sour Mango Limited, a company registered in Hong Kong. Registered office: Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong SAR. You can reach us at hello@profit.broker.
This policy covers two things: this website with its early-access list, and the profit.broker app for Shopify.
2. This website and the early-access list
When you join the early-access list, we receive the details you enter: your work email address and, if you add them, your store's web address and your yearly sales band. We also receive the page you signed up on and any campaign tags in its web address.
We use these details only to contact you about profit.broker, such as inviting you when a spot opens and sending occasional product notes. You can unsubscribe at any time by replying to any email or writing to us. We keep your details until you unsubscribe or ask us to delete them, and remove inactive sign-ups after 24 months.
This website sets no cookies and uses no analytics or advertising trackers. It loads its fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google when you open a page.
3. The profit.broker app
Our role
When a merchant installs profit.broker, the merchant decides what the app is used for, and we process the store's data on the merchant's behalf. In data protection terms the merchant is the controller and we are the processor. Our data processing addendum sets out those terms. For the merchant's own account details, such as the store name and billing status, we act as controller.
What we collect from Shopify
- Store details: store name and domain, currency, time zone and Shopify plan.
- Orders and refunds: amounts, discounts, taxes, shipping charges, refunded items and quantities, cancellation dates and the sales channel.
- Payments: transactions and their fees, Shopify Payments payouts, balance transactions and disputes.
- Products: products, variants, SKUs, prices and the cost per item.
- Customer ID: Shopify's customer ID on each order, used only to tell a customer's first order from later ones.
What we never collect
We don't request or store your customers' names, email addresses, phone numbers, postal addresses or postcodes, IP addresses, locations or order notes. We don't store the contents of Shopify's change notifications; we keep only the ID of what changed and fetch the current figures directly.
What we collect from other services you connect
- Meta and Google Ads: daily spend, impressions, clicks, conversions and conversion value per campaign. We read these only after you connect an ad account, and the access is read-only.
- Slack: the channel you choose for reports and alerts, when you connect Slack.
What you give us
- Costs and settings: product costs, shipping and packing rules, fixed costs, report schedules and alert settings.
- Report recipients: the email addresses of the people you choose to receive reports. Each recipient confirms before anything is sent and can unsubscribe with one click.
- Staff activity: the Shopify user ID of the staff member who makes a change, kept in an audit log for security.
How we use it
- To calculate your daily profit, forecasts, payout forecast and break-even figures.
- To send the reports and alerts you set up.
- To keep the service secure and working, and to fix problems.
- To help you with a support request, only after you ask and give us permission to look at your account.
We don't sell or rent data. We don't use it for advertising, we don't build profiles of your customers, and we don't make automated decisions about individuals. Billing is handled by Shopify.
4. Where data is stored and who helps us
App data is stored and processed in Frankfurt, Germany. We use these service providers:
| Provider | What it does | Location |
|---|---|---|
| Supabase | Database and file storage | Frankfurt, Germany |
| Render | Runs the app | Frankfurt, Germany |
| Amazon Web Services | Manages the keys that encrypt stored access tokens | Frankfurt, Germany |
| Sentry | Error monitoring, with personal data removed | Germany |
| Resend | Sends report and confirmation emails | Ireland |
| Slack | Delivers reports and alerts, only if you connect it | United States |
| Shopify | App platform and billing | Canada and other regions |
Where personal data leaves the European Economic Area or the UK, we rely on the safeguards our providers offer, such as the European Commission's standard contractual clauses. We'll update this list before adding a new provider.
5. How we protect it
- All connections use encryption in transit, and stored data is encrypted at rest.
- Access tokens for Shopify and connected services get an extra layer of encryption, with keys held in Amazon's key management service.
- Every store's data is kept separate at the database level, so one store's data can't be read through another's account.
- Access is read-only. We never change your store or ad accounts.
- Only authorised staff can reach production systems, and support access is logged.
6. How long we keep it
| Data | Kept for |
|---|---|
| Store data, profit figures and settings | While the app is installed. Deleted when Shopify confirms the uninstall, 48 hours after you remove the app. |
| Change notification records | 30 days |
| Raw copies of fetched data | 400 days, or until uninstall |
| Weekly report PDFs | 13 months, or until uninstall |
| Uploaded cost and ad spend files | 30 days |
| Data exports you request | 7 days |
| Audit log | 2 years, or until uninstall |
| Backups | Up to 5 weeks, after which deleted data is gone from backups too |
7. Your rights and requests
Merchants can export or delete their data from the app's settings, or by writing to us.
Customers of a store should contact that store. When a store passes on a request through Shopify, we act on it: we provide what we hold about that customer, which is their customer ID and the financial details of their orders, within 30 days, or remove the link between those orders and the customer.
Website visitors can ask to see, correct or delete the details they gave us, or object to how we use them.
Depending on where you live, laws such as Hong Kong's Personal Data (Privacy) Ordinance, the EU and UK GDPR, or California's privacy law may give you these rights and the right to complain to a data protection authority. Write to hello@profit.broker and we'll reply within 30 days.
8. Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how we use app data, we'll tell merchants by email or in the app before it takes effect.
9. Contact
Sour Mango Limited, Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong SAR · hello@profit.broker