Privacy Policy

Last updated: April 3, 2026

1. Who We Are

ProfitIQ (“we”, “our”, “us”) is a Shopify analytics application operated by CPro Growth. We provide profit analytics and reporting tools for Shopify merchants and e-commerce agencies.

Contact: caden@cprogrowth.com

2. Data We Collect

From Shopify

  • Order data (order ID, line items, quantities, prices, refunds)
  • Product and variant data (titles, SKUs, inventory unit costs)
  • Shop information (shop domain, currency, timezone)
  • Customer IDs (hashed — used for CAC and LTV calculations only)

From Google Ads

  • Campaign spend and impressions (aggregated, daily totals)
  • Account-level performance metrics
  • We do not store individual user data from Google Ads
  • We use Google user data solely to display your ad spend in your ProfitIQ dashboard
  • We do not share, sell, or use Google user data for any purpose other than providing the ProfitIQ service

From Meta (Facebook) Ads

  • Campaign spend and performance metrics (aggregated, daily totals)
  • Ad account identifiers
  • We do not store individual user or audience data from Meta

Account Data

  • Email address (used as your login identifier)
  • Encrypted OAuth access tokens (Google, Meta)

3. How We Use Your Data

We use the data listed above exclusively to:

  • Calculate and display your profit metrics (net profit, MER, CAC, ROAS, etc.)
  • Sync your order and ad data on a daily schedule
  • Send scheduled reports if you configure them
  • Notify you of goal completions or alert thresholds you have set

We do not sell, rent, or share your data with any third parties for marketing purposes.

4. Data Storage & Security

  • Data is stored in a PostgreSQL database hosted on Supabase (AWS US-West-2 region)
  • All OAuth credentials (Google, Meta) are encrypted using AES-256 (Fernet) before storage
  • All data transmission uses HTTPS / TLS 1.2+
  • Access to your data is restricted to authenticated requests only
  • We use short-lived JWT tokens (30-day expiry) for authentication

5. Data Retention

We retain your data for as long as your ProfitIQ subscription is active. When you uninstall ProfitIQ from your Shopify store, all your data (orders, metrics, credentials, configurations) is deleted from our systems within 48 hours.

You can also request immediate deletion by emailing caden@cprogrowth.com. See our Data Deletion page for instructions.

6. GDPR & Your Rights

If you are located in the European Economic Area (EEA), you have the right to:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your data (“right to be forgotten”)
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing under legitimate interests

To exercise any of these rights, email caden@cprogrowth.com. We will respond within 30 days.

We also respond to Shopify's mandatory GDPR webhooks for customer data requests, customer data erasure, and shop data erasure, as required by Shopify's Partner Program.

7. Cookies

ProfitIQ uses a single session cookie to maintain your login state inside the Shopify admin iframe. We do not use tracking cookies or advertising pixels.

8. Third-Party Services

We use the following third-party infrastructure services:

  • Supabase — database hosting (PostgreSQL on AWS)
  • Railway — backend API hosting
  • Vercel — frontend hosting
  • Redis (Upstash) — rate limiting and job queuing

Each of these providers has their own privacy policy and security practices.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Continued use of ProfitIQ after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions, requests, or concerns:

CPro Growth
Email: caden@cprogrowth.com