Privacy Policy

Last updated: May 16, 2026

Sales CRM Insights ("we", "our", "the app") is a Shopify application that provides customer relationship management and sales analytics for Shopify merchants. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you install and use Sales CRM Insights, we collect:

Store data: Your Shopify shop domain and access token (required to read your store data)
Customer data: Customer names, email addresses, phone numbers, order history, and location data synced from your Shopify store
Order data: Order IDs, amounts, line items, fulfillment status, and dates
Usage data: Sync logs and error logs for app diagnostics

We do not collect credit card numbers, passwords, or any payment information.

2. How We Use Your Data

Display CRM analytics, RFM segments, and customer insights within the app
Calculate customer lifetime value, DNA scores, and churn risk
Sync webhook events (orders, customers) in real time
Improve app performance and diagnose errors

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage

Your data is stored in a secure PostgreSQL database hosted on Supabase (EU/US region). Data is encrypted at rest and in transit using TLS. We retain your data for as long as your app subscription is active. After uninstalling the app, data is deleted within 30 days upon request.

4. GDPR & Data Subject Rights

If you or your customers are located in the EU/EEA, you have the right to:

Access: Request a copy of data we hold about you or your customers
Deletion: Request deletion of customer data from our systems
Portability: Export customer data as CSV from within the app

We process Shopify GDPR webhooks (customers/data_request, customers/redact,shop/redact) automatically. To submit a manual request, contact us via the Support page in the app.

5. Third-Party Services

Shopify: OAuth authentication and billing — governed by Shopify's Privacy Policy
Supabase: Database hosting — governed by Supabase's Privacy Policy
Railway: Application hosting — governed by Railway's Privacy Policy

6. Security

All data is transmitted over HTTPS. Access tokens are stored encrypted. We follow Shopify's security best practices for embedded apps. We never log or expose full access tokens in application logs.

7. Children's Privacy

This app is intended for use by Shopify merchants (businesses). We do not knowingly collect personal information from anyone under the age of 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance.

9. Contact

Questions about this policy or data requests? Contact us through the Support page inside the app.