Privacy Policy

Reportly is a business-to-business tool used by merchants. The “you” in this policy is the merchant (the Shopify store owner or their team) who installs and uses Reportly. We are a data processor acting on your instructions for the store data you connect; you remain the controller of your store’s data and of your customers’ personal information.

When you install the app and authorize it, Shopify grants Reportly read access to the store data needed to produce your analytics. This includes:

• Products, variants, and images (titles, SKUs, prices, categories)
• Orders and order line items (order number, value, quantities, SKUs, channel/tags)
• Returns and refunds (reason codes where available, amounts, dates, status)
• Inventory levels and fulfilment locations (including the location’s region/state)
• Shop and account information needed to run the app and billing

Customer-personal-data minimisation. Reportly is built to analyse products, orders, and returns — not shoppers. We do not require, use, or display customer names, email addresses, phone numbers, or street addresses in the product analytics, dashboards, or reports. Where an order carries location data, we use only the coarse region/state for geographic insight. We do not build customer profiles and we do not use your data for advertising.

Reportly lets you optionally connect additional sales and returns channels — for example marketplace connectors (such as Mirakl-powered department stores), returns platforms (such as Loop Returns), wholesale (such as Faire), and advertising analytics (such as Criteo). When you connect a channel, we access the equivalent order, return, product, and performance data from that channel to map it back to your Shopify catalogue and produce unified, per-channel analytics. We access only what each connector requires, using the credentials you provide, and only after you explicitly connect it.

To operate the service we also process: your account details (name, work email, and the password you set for direct login to app.askreportly.com), your subscription/billing status (handled through Shopify Billing — we do not receive or store full card numbers), and technical/usage logs (such as app events and error diagnostics) used to keep the service reliable and secure.

We use the data above only to provide and improve the service you asked for:

• Compute analytics — health scores, return-rate predictions, sizing, restock, and profitability insights
• Show unified, per-channel dashboards and reports
• Run background data syncs and keep your metrics current
• Provide support, maintain security, prevent abuse, and meet legal obligations

We do not sell your data, and we do not use it to serve advertising or to train models that are shared across unrelated merchants.

Your data is isolated per tenant so one merchant’s data is never mixed with another’s. Connection credentials and access tokens are encrypted at rest, and data is transmitted over encrypted connections (TLS). We restrict internal access to authorised systems and personnel on a need-to-know basis, and we retain data only for as long as needed to provide the service or comply with the law.

We rely on a small set of infrastructure providers to run Reportly — for hosting, databases, and background processing (for example, our cloud application, database, and caching providers) — and on Shopify and any channels you connect. These providers process data only to operate the service on our behalf, under contractual confidentiality and security obligations. A current list of subprocessors is available on request at the contact below.

When you uninstall the app or close your account, we stop syncing your data and delete or irreversibly anonymise it within a reasonable period, except where we must retain limited records to meet legal, tax, or security obligations. In line with Shopify’s requirements, we honour Shopify’s mandatory data-protection webhooks:

• customers/data_request — we respond to a customer’s request for their data
• customers/redact — we delete a specific customer’s data
• shop/redact — we delete your store’s data after uninstall

Depending on where you and your customers are located (for example under GDPR or CCPA), you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. Because we act as a processor for your store data, we will help you fulfil your customers’ requests and will action verified requests we receive about our own account data. Contact us using the details below to exercise these rights.

The Reportly dashboard uses only the cookies strictly necessary to keep you securely signed in (an authentication cookie) and to run the app. We do not use advertising or cross-site tracking cookies in the app.

Your data may be processed in countries other than your own by us or our subprocessors. Where required, we put appropriate safeguards in place for such transfers.

We may update this policy as the service evolves. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app or by email.

Questions, requests, or a copy of our subprocessor list? Contact privacy@askreportly.com.
Data controller: Reportly AI Ltd, a company registered in Northern Ireland. Written enquiries to the address above.