Privacy Policy

1. Introduction

LedgerSpear ("we", "us", or "our") operates LedgerSpear, a revenue intelligence platform for Shopify app developers. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account via Firebase Authentication, we collect:

• Email address
• Display name (if provided)
• Authentication provider details (Google, email/password)

2.2 Shopify Partner Data

When you connect your Shopify Partner account, we access and store:

• App subscription data (plan names, pricing, status, creation and cancellation dates)
• Transaction data (charge amounts, types, dates — for revenue calculation)
• App listing metadata (app name, app ID)
• Merchant identifiers (anonymized shop references for subscription tracking)

We do not access merchant store data, customer information, product listings, or order details. Our access is limited to the Shopify Partner API scope required for revenue analytics.

2.3 Usage Data

We may collect basic usage analytics such as pages visited, features used, and session duration to improve the Service.

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Calculate revenue metrics (MRR, ARR, churn rates, risk scores)
• Generate daily revenue snapshots and AI-powered insights
• Send service notifications and updates
• Improve and optimize the Service
• Respond to support requests

4. Data Storage and Security

Your data is stored on Google Cloud Platform (GCP) infrastructure. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for stored data
• Firebase Authentication for secure access control
• Private database networking (no public IP access)

5. Shopify Data Handling

We take special care with Shopify Partner data:

• Data is fetched via the official Shopify Partner API using your authorized credentials
• Raw transaction data is stored immutably for audit purposes
• Revenue ledgers are rebuilt deterministically from raw data — the same input always produces the same output
• Daily snapshots are retained as a permanent audit trail
• We do not sell, share, or provide your Shopify data to third parties

6. Data Retention

We retain your data for as long as your account is active. Daily revenue snapshots are retained indefinitely as part of the audit trail. If you delete your account, we will remove your personal data and Shopify Partner data within 30 days, except where retention is required by law.

7. Third-Party Services

We use the following third-party services:

• Google Cloud Platform — infrastructure and data storage
• Firebase — authentication and hosting
• Shopify Partner API — revenue data source

Each third-party service has its own privacy policy governing their handling of data.

8. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and associated data
• Export — Request an export of your data in a portable format
• Disconnect — Revoke Shopify Partner API access at any time

To exercise any of these rights, contact us at accounts@ledgerspear.com.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at accounts@ledgerspear.com.