Privacy Policy

The short version

True COGS works with product and inventory data, and with the financial parts of your orders. It reads what sold, for how much, and when, so it can show profit at the cost each item had on the day it sold. The app never queries, receives, or stores your customers' personal information: no shopper names, emails, phone numbers, or addresses. Orders are read, totalled, and discarded in the same request; the only thing kept from an order is a returned item's line in your cost history. We do not sell data, we do not run ads, and we do not share your data with anyone except the service providers listed below.

Information we collect

When you install True COGS on your Shopify store, the app collects and stores:

Store identity and session. Your store's myshopify.com domain and the access token Shopify issues so the app can operate on your store. Tokens are stored securely and used only to provide the app's features.
Product and inventory data. Product and variant titles, SKUs, barcodes, inventory item identifiers, inventory quantities, and the cost-per-item values on your products — read and written under the app's Shopify permissions (products and inventory, including purchase orders, inventory shipments, transfers, and received items).
Data you enter in the app. Unit costs you type in, duty rules you create (HS code, country of origin, duty rate), target margins, the payment fees, shipping rates, ad spend and other costs you enter for net profit, app settings, and any opening-balance costs you import (for example from a Stocky CSV export). When you upload a cost CSV, the file is read in your browser; only the matched product identifiers and cost values are sent to our server, and the file itself is not uploaded or stored. The Stocky purchase-order import is different: those files are sent to our server and kept with your store's data, so a past import can be checked or read again. They are deleted with the rest of your store's data when you uninstall.
Cost history. The app's core feature is a permanent, append-only ledger of cost changes for your products. This history is stored for as long as the app is installed — that is the product working as intended.
Order financial data. Since 21 September 2026, reading orders (including your full order history) is part of the app's install permissions, so profit can be shown at the cost each item had on the day it sold. The app reads only the financial parts of each order: line quantities, prices after discounts, refunds and returns, taxes, the shipping charged and the shipping method's name, payment transactions (payment method, amount, and fee), and timestamps. It does not read or store shopper names, emails, phone numbers, or addresses. Orders are read at the moment you view a figure, folded into a total, and dropped — there is no order table, no cache, and no order identifier in our database. The one thing kept: when a customer returns an item to stock, the returned units are added to your cost history at the cost they had on the day they sold — which product, how many, and the sale date; never an order number or anything about the shopper.
Store analytics — only if you allow it. To show profit history from before you installed, the app can read your store's sales and cost totals through Shopify's analytics (ShopifyQL). This permission is asked for separately, and you can decline or withdraw it. Shopify requires any app that uses its analytics to hold access to customer name, email, phone and address; True COGS never queries, reads, displays or stores any of these fields.
Billing status. Subscriptions are handled entirely by Shopify's billing system (managed pricing). We receive only your current plan status. We never see or store card numbers or any payment details.
Support correspondence. If you email us, we keep the correspondence so we can help you.

Supplier invoices you upload

When you upload a supplier invoice, the file is sent to our server and read there. True COGS reads a PDF whose text it can read itself. A photo, a scan, or a PDF it cannot read in full is sent to Anthropic to be transcribed.
True COGS does not keep the file.
From an invoice it reads, it keeps the lines it could prove and the invoice's totals, with the invoice's number, date and supplier name where printed, the file's name, and a fingerprint of the file, so the same invoice is never received twice.
A photo or scan whose reading could not be proven is not kept.

Information we do not collect

No customer (shopper) personal data — ever. The app reads only order financial fields and store totals, even where Shopify's permission would allow more. We hold no shopper names, emails, phone numbers, addresses, or payment information — nothing to leak, sell, or lose.
No payment details — yours or your customers'. Billing runs through Shopify.
No tracking inside the app. The embedded app uses Shopify session tokens to authenticate; it does not set advertising or cross-site tracking cookies.

How we use the data

To provide the app's features: recalculating weighted-average or FIFO cost on stock receipts, writing cost back to Shopify, tariff and landed-cost calculations, nightly margin checks and alerts, reports, and CSV exports you request.
To run scheduled background jobs (for example, the nightly margin watchdog) on your store's product data.
To respond to your support requests.
To comply with legal obligations and with Shopify's platform requirements.

We do not use your data for advertising, we do not sell or rent it, and we do not share it with third parties other than the service providers below.

Where data is stored, and who processes it

App data is stored in the United States. Our service providers ("subprocessors") are:

Shopify — the platform the app runs on and the source of your store's data.
Render — application hosting (US, Ohio region).
Neon — PostgreSQL database hosting (US).
Anthropic (Claude API, US) — reads supplier invoices you upload when they are photos, scans, or PDFs whose text True COGS cannot read in full. Under its commercial terms, Anthropic does not use the files or the readings to train its models, and deletes them within 30 days, unless it must keep them longer under its usage policy or the law.
Resend — sends the app's emails to your store's email address.

Data in transit is encrypted (HTTPS/TLS), and our providers encrypt data at rest, backups included. Every read of order data is logged — which store, which part of the app, and how many records; never the contents. Access to the production systems is limited to the developer, with two-factor sign-in.

Data retention and deletion

While installed: your cost history is kept permanently and append-only — that is the app's purpose.
When you uninstall: your store's data — cost history, duty rules, settings, and session tokens — is deleted from our systems following Shopify's uninstall and redaction process, within 30 days at the latest.
Order data: not stored. It is read at request time to compute cost and margin figures, then discarded. The one exception is a returned item's line in your cost history (product, units, sale date), described above, which follows the cost history's retention.
On request: email us at any time and we will delete your store's data, or provide a copy of what we hold for your store.

Our website

This website (nexuslogicsystems.com) is a static informational site. It may use basic, privacy-respecting analytics to count page visits. It does not require accounts and does not collect personal information beyond what you choose to send us by email.

Changes to this policy

If we change this policy, we will update this page and the "last updated" date above. Material changes will be noted plainly at the top of the page.

Contact

Nexus Logic Systems — developer of True COGS
Email: support@nexuslogicsystems.com
App listing: apps.shopify.com/truecogs