Privacy Policy

What data we collect

When you connect a Shopify store, we receive order-level data through Shopify's official OAuth API. This includes order totals, discount amounts, refunds, payment fees, fulfilment status, and order timestamps. We use this data to compute revenue metrics, net profit, and trend analytics for your dashboard.

When you connect additional integrations, we collect the following:

• Stripe Connect — transaction-level payment data including gross amount, Stripe fees, net payout, and charge timestamps. This is used to show accurate fee breakdowns alongside your Shopify revenue.
• Klaviyo — campaign metadata (campaign name, send date, recipient count), aggregate performance metrics (open rate, click rate), and revenue attributed to emails opened within a 7-day window. We do not access your Klaviyo subscriber list or individual email addresses.
• Google Ads & Meta Ads — campaign-level ad spend, impressions, clicks, and conversions. This data is used to calculate true ROAS and net profit after advertising costs.

We do not store raw customer personally identifiable information (PII) beyond what is strictly necessary for analytics — specifically, customer name and email may be stored per order to support order-level search and deduplication, but they are never surfaced in aggregate reports, sold, or shared with third parties.

We also collect standard account information (your name and email address) when you register, and usage telemetry such as page views and feature interactions to improve the product.

Billing data

Subscription payments are processed by Paddle, our Merchant of Record. Paddle handles all payment information (credit card numbers, PayPal credentials, etc.) directly — we never see or store your full payment details. We receive a Paddle customer ID and subscription ID to manage your plan status, and we receive webhook notifications for events such as subscription creation, renewal, cancellation, and failed payments.

Why we collect it

The sole purpose of data collection is to provide you — the merchant — with accurate, actionable analytics and reporting. Order data powers your KPI cards, revenue charts, forecasting models, and AI-generated insights. Integration data from Stripe, Klaviyo, and ad platforms enriches your dashboard with fee breakdowns, email attribution, and ad spend analysis. We do not use your store data to train machine-learning models beyond the insights feature that directly benefits your account.

How long we keep it

Your data is retained for as long as your merchant account is active. If you disconnect a store integration, you may request permanent deletion (see below). If you close your account entirely, all associated store data, orders, and revenue snapshots are deleted within 30 days.

We don't sell your data

RTDashboard does not sell, rent, or licence your data — or your customers' data — to any third party, ever. Your store data is yours. We are not in the data-brokerage business.

Requesting deletion

You have two ways to permanently delete your store data from our systems:

• Disconnect your store — go to Settings → Integrations and click "Disconnect" next to any connected store. This immediately deletes all orders, revenue snapshots, and insights associated with that store from our database.
• Email us — send a deletion request to privacy@rtdashboard.com from the email address on your account. We will complete the deletion within 7 business days and send you a confirmation.

Security

All data is encrypted in transit using TLS. Integration access tokens (Shopify and other sources) are additionally encrypted at the application layer before they are stored, and are never included in API responses or logs. Our managed database provider encrypts data at rest. We follow least-privilege principles for internal access to production systems.

Contact

Questions about this policy? Reach us at privacy@rtdashboard.com.