In short
- Tieout stores the store's financial records: sales, refunds, costs of goods, payments, fees and payouts. It never stores customer names, email addresses, phone numbers or postal addresses.
- The data is used only to show the merchant their profit, tie orders out to payouts and close months. It is never sold, used for advertising or profiling, or shared beyond the services that run the app.
- The app and its database run in the United States, on Render and Neon. Tieout sends no emails and adds nothing to the store's pages.
- Every view of a store's data in the app is recorded in an access log, kept for 365 days.
- Everything stored for a shop is deleted when Shopify asks, 48 hours after the app is uninstalled.
Who is responsible
Tieout: Verified Net Profit ("Tieout", "the app") is made and operated by Nexus Logic Systems, Mostaganem, Algeria ("we", "us"). For any question about this policy, write to support@nexuslogicsystems.com.
Who this policy is for
This policy is for merchants: shops that install Tieout from the Shopify App Store, and the staff who use it. Tieout has no part that shoppers see or use.
The merchant decides why and how the store's data is used: the merchant is the controller. We handle that data only to provide the app to the merchant, on the merchant's instructions, as the merchant's processor.
What the app stores
From Shopify's sales records
| Data | Why it is stored |
|---|---|
| Sales ledger rows | One row for each sale, edit, refund and return, as Shopify's reports record it: sale, order and line item IDs, the order number (such as #1001), product and variant IDs, the product title, the date, the amounts (sales, discounts, returns, shipping, taxes, duties, fees, tips, gift cards, total), the quantities and the cost of goods Shopify recorded at that moment. These rows make up the profit statement. |
| Orders | Order ID, order number, date, currency, whether it is a test order or cancelled, the amount still outstanding and the payment gateways used. Used to count orders for the plan and to tie each order out. |
| Payments and refunds | For each payment transaction: its ID, the order ID, its kind, status, gateway, date and amount. For each refunded item: the quantity and how many were restocked, so that items refunded without being restocked are counted as a cost. |
| Fulfillments | Fulfillment ID, order ID and date, used only when the merchant chooses an estimated shipping label cost per fulfillment. |
| Shopify Payments statement | Only for stores that use Shopify Payments: balance transaction IDs, types, dates, amounts, fees and net amounts, and the payouts they belong to (payout ID, date, status, amount). These give exact processing fees, chargebacks and the payout tie-out. |
What the merchant enters
| Data | Why it is stored |
|---|---|
| Fee rules | The percentage and fixed fee for payment gateways other than Shopify Payments. |
| Ad spend | Date, channel, amount and an optional invoice reference. |
| Operating expenses | Name, amount, whether it repeats monthly, and its dates. |
| Shipping label setting | Whether to estimate a label cost per fulfillment, and the amount. |
| Closed months | The frozen statement of each month the merchant closes, with its SHA-256 fingerprint, and any later adjustments. |
About the shop and its use of the app
| Data | Why it is stored |
|---|---|
| Shop domain, name, currency and time zone | To date every amount in the shop's own time zone and currency. |
| Access token and granted permissions | Issued by Shopify at install, to read the records listed above. |
| Plan and import status | The current plan, and the progress and any errors of the import and hourly sync. |
| Access log | For every page, export and background import that reads the store's data: the shop, the staff member's Shopify user ID (a number, not a name or email) or the system process, what was opened, which record, and when. |
What the app never stores
- Customer names, email addresses, phone numbers or postal addresses. Tieout does not ask Shopify for these fields.
- Payment card or bank account numbers.
- Anything about visitors to the store. Tieout has no storefront part, sets nothing on the store's pages and sends no emails.
Shopify requires apps that read its sales reports to hold access to protected customer data. Tieout uses that access only to read the financial columns listed above.
How the data is used
Only to provide Tieout to the merchant: the profit statement, the profit of each order, the tie-out from sale to payout, closed months and their exports, and the order count for the plan. We do not sell the data, use it for advertising or profiling, make automated decisions about anyone with it, or use it to train models. We look at a store's data only when the merchant asks for support, or to fix a fault.
Where the data is kept
On Render's servers and in a Neon Postgres database, both in Ohio, United States. Data is transferred there from Shopify over encrypted connections.
How long it is kept
- While the app is installed: the store's records are kept so the merchant can see past months and closed months.
- Access log: each entry is deleted after 365 days.
- Failed background tasks: deleted after 30 days.
- After uninstall: see below.
Requests and erasure
Merchants can ask us for a copy of their store's data, or for its deletion, at support@nexuslogicsystems.com. Closed months can be exported from the app at any time, as CSV or JSON.
When a shopper asks a store for their data or for its erasure, Shopify passes the request to the app. Tieout holds no customer personal data, so there is nothing to return or erase; the request is recorded.
When you uninstall
When a merchant uninstalls Tieout, the shop's access token and all scheduled work for the shop are deleted at once. The shop's records are kept for 48 hours, so that a reinstall can pick up where it left off. After 48 hours Shopify asks the app to erase the shop, and the app then deletes everything it stores for it: the sales, orders, payments, refunds, fulfillments, Shopify Payments records, fee rules, ad spend, expenses, closed months, adjustments, sync status and access log.
Every notice from Shopify is checked for Shopify's signature before the app acts on it.
Security
- All traffic between Shopify, the app's server and the database is encrypted in transit. The database and its backups are encrypted at rest.
- Requests from the Shopify admin are accepted only with a valid session token from Shopify.
- Each shop's data is kept apart from every other shop's.
- Only the developer has access to the systems, through accounts with strong, unique passwords and two-factor sign-in.
- Every access to a store's data in the app is logged, and the log is reviewed regularly.
- Development and testing use development stores and a separate database. Production data is never copied into development.
No system is perfectly secure. We follow a written security incident response policy. If we learn of a breach that affects a merchant's data, we tell the merchant without undue delay and within 72 hours.
Data processing terms
By installing Tieout, the merchant and Nexus Logic Systems agree to these terms for the store's data processed by the app.
- Roles. The merchant is the controller. We are the processor and act only on the merchant's instructions, given by using the app.
- Scope. The data, purposes and services listed on this page, and nothing else.
- Confidentiality. Only the developer can access the data, and only to provide, support or fix the app.
- Security. The measures described under Security.
- Sub-processors. Shopify, Render and Neon. We tell the merchant before adding another.
- Transfers. The data is stored in the United States.
- Incidents. We notify the merchant without undue delay, and within 72 hours, of any security incident affecting their data.
- Assistance. We help the merchant answer requests from customers and authorities about data processed by the app.
- Deletion. All data is deleted 48 hours after uninstall, on Shopify's request, or earlier on the merchant's request.
Children
The app is a tool for businesses. It is not directed at children, and we do not knowingly collect data from children.
Changes to this policy
When we change this policy, we publish the new version on this page with a new effective date. If a change is important for merchants, we also tell them in the app.
Contact
Nexus Logic Systems
Mostaganem, Algeria
support@nexuslogicsystems.com
This policy describes the Shopify app Tieout: Verified Net Profit. It does not describe the website nexuslogicsystems.com.