Privacy

What Adds Up reads from your store, what it keeps, what it deliberately never collects, and when all of it is deleted.

LAST UPDATED 15 OCTOBER 2026

01Who this is from

Adds Up is operated by Cleo Wangayi, 3 3rd Street, Westview, Kadoma, Zimbabwe. Questions about anything on this page go to dev@watacle.com.

This policy covers the Adds Up Shopify app. Where the app processes personal data that belongs to your customers, you are the data controller and we are your processor. Where it processes your own account details, we are the controller. The processor terms are part of our terms of service, so there is no separate agreement to request.

02What the app reads from Shopify

The app asks for the narrowest set of permissions that lets it do its job. Shopify shows them to you before you install. These are all of them, and every one is read-only:

read_orders

Orders, line items, discounts, shipping lines, payment transactions and refunds: the raw material for every check.

read_products

Product and variant titles, SKUs, prices and the unit costs you record in Shopify.

read_inventory

Stock levels and inventory adjustments, to see whether refunded goods went back on the shelf.

read_returns

Return requests and their dispositions (restocked, not restocked).

read_discounts

How your discounts are set up, including whether they may be combined.

read_locations

The names of your locations, so issues can say where something happened.

Two more are optional. The app asks for them inside the app, only if you turn on payout checks:

read_shopify_payments_accounts

Your Shopify Payments account balance. Asked for inside the app, only if you turn on payout checks.

read_shopify_payments_payouts

Payouts and the balance transactions behind them, to compare each payout with its transactions.

03What the app never asks for

No write permission of any kind. The app cannot change your products, orders, inventory, discounts, prices or settings. It looks; you decide and act in Shopify.
The read_customers permission. The app has no way to read your customer list.
The read_users permission. The app cannot see the names or email addresses of your staff.
Payment card numbers. Shopify never gives them to apps, and the app has no use for them.

Finding money that does not add up needs amounts, quantities, statuses and dates. It has no use for a person, so it does not ask for one.

04What the app stores about your orders

The app reads your orders and keeps the financial facts of each one so that it can compare what happened with what should have happened. Concretely, for each order it keeps:

Money

Totals, taxes, discounts, shipping, tips, refunds, payment transactions, payment gateway names and fees.

What was sold

Product and variant titles, SKUs, quantities and prices.

How it happened

Order number and status, dates, the sales channel or app, the point-of-sale location, fulfillment and return records, discount codes as recorded, and shipping method names.

Where it shipped

The country and province code of the shipping address. Nothing else from the address.

The app does not store customer names, email addresses, phone numbers, street addresses, customer IDs, or anything from the customer record. It does not ask Shopify for them.

Three things you should know, because they are typed by people and we cannot fully control them:

Refund notes. The app reads the note your staff type on a refund, to recognise reasons such as "damaged", and shows it as evidence on an issue. We remove email addresses and phone numbers and keep at most 240 characters, but we cannot detect a name. Please ask your staff not to put customer details in refund notes.
Discount codes. They are stored as you created them. If you issue a code that contains a person's name, that name is stored.
Order timeline events. Shopify writes customer contact details and staff names into the text of timeline events, so the app does not request that text or the name of who did it. It keeps only what kind of event it was and when.

05Personal data we do hold

Three kinds. None of it is your customers' personal data.

Your staff, by ID

When someone on your team opens the app, Shopify's session gives us an opaque numeric user ID, not a name or email. We record it against actions such as changing an issue's status, so the audit log can say which staff account did it.

What your team types

Notes on issues and recoveries, who an issue is assigned to (free text, so it may be a name or an email address), and the email address you choose for alerts. You typed it, so it is yours to change or delete.

Your shop record

Your shop's domain, name, currency, timezone and plan, the permissions you granted, and an encrypted Shopify access token.

06What we never do

We do not sell your data or your customers' data to anyone.
We do not share your data with other merchants. Every table is separated by store in the database itself, and automated tests prove that one store cannot read another's rows.
We do not use your data to train machine learning models. The checks are fixed rules and statistics computed on your own history.
We do not send marketing to your customers or your suppliers.
We do not set cookies, and we add no analytics, advertising or tracking scripts. The app loads the App Bridge and Polaris scripts from Shopify's servers, which Shopify requires of every embedded app.
We do not deliberately put access tokens, order contents or customer data in our logs. Log lines carry identifiers, counts and error messages, and our hosting provider keeps them only briefly.

07Customer data requests

Shopify notifies us when one of your customers asks what data an app holds about them, or asks for it to be erased, and again when a shop is deleted. We acknowledge these automatically.

Because the app stores no customer record, there is normally nothing to disclose or erase. The exception is the free text in section 4: if a customer's name ended up in a refund note or a discount code, email dev@watacle.com with the order number and we will remove it within 30 days.

08How long we keep things

Your access token

Deleted immediately when you uninstall the app.

Everything else

Deleted in full 48 hours after you uninstall, when Shopify sends the shop redaction notice. That covers orders, refunds, issues, notes, recoveries, settings and the audit log, and it cannot be recovered afterwards.

Database backups

Our database provider keeps short-lived backups on its own schedule. They roll off automatically, and we cannot edit inside a backup.

The 48-hour gap is Shopify's, and it means a merchant who uninstalls by accident and reinstalls the same day gets their history back. If you want your data deleted sooner, email dev@watacle.com and we will do it.

09Security

All traffic is over HTTPS.
Your Shopify access token, and the refresh token that renews it, are encrypted with AES-256-GCM before they are stored. A copy of the database is not a set of working credentials for your store.
Row-level security in the database keeps each store's data separate, and the app connects as a role that cannot bypass it.
Financial records are append-only, and every action by you or by the system is written to an audit log that cannot be edited.
The database is managed and encrypted at rest, and its credentials live only in the app's private environment settings.
Access to production is limited to the people who operate the service. If we become aware of a breach that affects your data, we will tell you without undue delay and within 72 hours.

10Where your data lives, and who else touches it

The app runs in the eastern United States. These are the only third parties that can reach your data, and each is bound by its own data protection terms:

Vercel Inc.

Application hosting, background job queue and scheduled jobs. United States (Washington, D.C.).

Neon (a Databricks company)

Managed PostgreSQL database. United States (Northern Virginia).

Resend

Email delivery, used only if you turn on email alerts. Receives your alert address and the email text (store name, issue titles, amounts). United States.

Our hosting provider's request logs record the IP address and browser of anyone who loads the app or these pages. In a rare failure, a database error message can quote the values of the query that failed, which is one reason refund notes are redacted and capped before they are stored. Shopify is not on this list because Shopify is where your data already is: we read from it and send it nothing it did not already have.

Adds Up is operated from Zimbabwe and your data is stored in the United States, so using the app means your data is transferred there. It is held only by the providers above, under their data protection terms, and is never moved anywhere else.

We will update this page before adding a new sub-processor, not after.

11Your rights

Depending on where you are, you may have the right to access, correct, export or delete personal data we hold about you, to object to processing, or to complain to a data protection authority. We are subject to Zimbabwe's Cyber and Data Protection Act, whose authority is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ); you may also complain to the authority where you are. Email dev@watacle.com and we will respond within 30 days.

For personal data that belongs to your customers, you are the controller and the request should come through you. We will help with any such request.

12Changes

If this policy changes in a way that affects what we collect or what we do with it, we will tell you inside the app before the change takes effect. Small wording changes we will just make.