Privacy Policy

NDA Profit Global (“the App”) is operated by North Digital Axis. This policy explains what data the App accesses, why, how long it is kept, and how to have it deleted.

1. What we access from your store

When you install the App, Shopify grants it read-only access to the following, and nothing else:

• Orders — totals, discounts, refunds, shipping charged, line items, fulfillment and financial status. Used to calculate revenue, tax and profit.
• Products and variants — title, SKU, price, inventory. Used so you can enter a cost of goods per variant.
• Customers — only the internal customer identifier attached to an order, used to count repeat purchases.

2. What we store

• Your store domain, the access token issued by Shopify, your selected country, language and currency.
• The settings you enter: tax rates, fees, shipping, packaging, fixed costs, cost of goods per variant.
• Data you enter yourself: ad spend per day, suppliers, deposit returns.
• A short-lived cache of computed figures (up to 15 minutes) to avoid re-querying Shopify on every page load.

Data is stored on Cloudflare infrastructure (D1 and KV), isolated per store. Every record is scoped to your store domain and is never combined with another merchant’s data.

3. What we never do

• We do not sell, rent or share your data with third parties.
• We do not use your data to train models or build cross-merchant benchmarks.
• We do not place advertising in the App.

4. Third parties

The App runs on Cloudflare Workers and communicates only with Shopify’s Admin API. No analytics, tracking or advertising scripts are loaded in the App interface.

5. Retention and deletion

When you uninstall the App, Shopify sends an app/uninstalled webhook and your store is marked inactive. On the mandatory shop/redact webhook (sent by Shopify 48 hours after uninstall), all of your data is permanently deleted from our database and cache.

You can request deletion at any time before that by writing to support@northdigitalaxis.com from an address associated with the store. We action such requests within 30 days.

Because the App does not store end-customer personal data, the customers/data_request and customers/redact webhooks are acknowledged with nothing to return or erase.

6. Your rights

Depending on where you are established, you may have the right to access, correct, export or erase your data, and to object to processing. Contact support@northdigitalaxis.com and we will respond within 30 days.

7. Security

All traffic is encrypted with TLS. Sessions use signed, HTTP-only, Secure cookies. Every webhook is verified with an HMAC signature. Access tokens are stored encrypted at rest by the platform and are never exposed in the interface.

8. Changes

If this policy changes materially, the date at the top is updated and active merchants are notified in-app before the change takes effect.

9. Contact

North Digital Axis — support@northdigitalaxis.com