Privacy Policy

What we collect

When you sign up and connect your Shopify store, we collect:

• · Your account email address, used to sign in and to deliver your weekly brief.
• · Your Shopify store domain (the one that ends in myshopify.com).
• · The connection credentials you provide during setup (see below).
• · Store data we fetch from Shopify to compute your brief: order totals, product and variant names, inventory counts, and a count of returning vs. new customers.

We do not request, receive, or store your customers' names, email addresses, phone numbers, or shipping addresses. We ask Shopify only for the numbers.

Connection credentials

When you connect your store you give us either a read-only Admin API token, or a Client ID and Client Secret that we exchange with Shopify for short-lived access tokens. All of these are encrypted with AES-256 before they are stored, are never visible in your browser, and are never written to logs. Only the ShopRecap backend can decrypt them, and only to call Shopify on your behalf.

What we compute and keep

After fetching the raw numbers, we compute aggregate weekly metrics (revenue, order counts, average order value, top sellers, low stock, week-over-week change) and store those totals along with the text of your brief. We do not keep the raw order list beyond what's needed to compute the current brief.

Payments

Payments are processed by Stripe. Your card number goes directly to Stripe and never touches our servers. We store only your Stripe customer and subscription IDs so we know your plan status.

Where your data lives

ShopRecap runs on Lovable Cloud infrastructure (database and hosting powered by Supabase). Your data is stored encrypted at rest in the United States.

Cookies

We use cookies to keep you signed in. Our hosting provider collects basic, anonymous visit statistics. No advertising trackers, no ad pixels, nothing that follows you around the internet.

Who we share with

We use two additional service providers to run ShopRecap. They are data processors acting on our instructions, not partners we sell data to.

• · Resend delivers your weekly brief email. Resend receives your delivery email address and the contents of the brief itself.
• · Anthropic generates the paragraphs in your brief. We send only the aggregate, non-identifying numbers we computed (totals, percentages, product names), never customer information.

We do not sell your data. We do not share it with advertisers, brokers, or aggregators. We do not use your data to train models, and their terms prohibit them from using your content to train models.

Your rights

You can request access, correction, deletion, or an export of your data at any time by emailing support@shoprecap.com. Deleting your account from Settings removes everything associated with it: your login, your store connection, all metrics and briefs, and your subscription. It is immediate and permanent. You can also email support@shoprecap.com and we will do it for you.

Data breach notification

If we ever have a data breach affecting your information, we will email you promptly with what happened, what was affected, and what we are doing about it.

Who this is for

ShopRecap is for business use and not directed at anyone under 18.

Changes to this policy

We may update this policy. If we make a material change we will email you before it takes effect.

Contacting us

For any privacy question or request email support@shoprecap.com. A real person will reply.

ShopRecap is operated by Hickman Capital Holdings LLC (dba ShopRecap).