OrderKept Privacy Policy

Last updated: September 4, 2026

OrderKept (“we”, “the app”) is a Shopify embedded app that shows merchants estimated profit on orders using order totals, product unit costs from Shopify Inventory, and a simple card-fee estimate.

What we access

  • Orders (read): line items, subtotals, shipping charged, and limited order metadata needed to calculate “kept” profit.
  • Products / inventory / locations (read): variant unit cost from Shopify Inventory Item cost fields, and location context required by the Admin API for those reads.
  • Access is read-only. OrderKept does not request write scopes for orders, products, inventory, or locations.
  • We do not use order data for ads, resale, or training unrelated models.

Customer data

OrderKept is designed to minimize customer personal information. The app does not display customer names or shipping addresses in the merchant UI. Order and product data used for profit estimates is fetched live from Shopify when you open the app.

Storage & retention

  • Sessions: OAuth session tokens are stored so the app can call the Shopify Admin API on behalf of the shop.
  • Uninstall: When the app is uninstalled, Shopify sends an app/uninstalled webhook and we delete all Session rows for that shop.
  • Order and product data is fetched live from Shopify when you open the app; v1 does not permanently archive customer personal information in OrderKept’s database.

Encryption & security

Traffic is served over HTTPS. Session secrets and access tokens are stored in the app database and are not intentionally logged. Production deployments use encrypted-at-rest managed databases and restricted access to environment secrets. Merchants authenticate via Shopify OAuth / session tokens.

Third parties

Shopify hosts merchant and customer commerce data. Hosting providers that run the OrderKept web process may process request logs (IPs, user agents) under their policies. We do not sell personal data.

Your choices

Uninstall OrderKept from the Shopify admin to revoke access. For deletion or privacy questions, contact vbrover17@gmail.com.

Changes

We may update this policy as the product matures (billing, settings, or retention). Material changes will be reflected here with a new “Last updated” date.