Order Profit Protector — privacy notice

Effective 2026-10-07. Order Profit Protector is operated by SoftStudioX at https://app.allarabi.com. Support and privacy contact: softstudix@gmail.com. This release is being submitted for Shopify review. Availability remains subject to Shopify's review.

The merchant controls its store's customer data. SoftStudioX processes it on the merchant's instructions to provide order imports, contribution-profit estimates, descriptive order history and financial risk explanations. Our merchant privacy and processing terms form part of this notice and describe both parties' responsibilities, assistance and incident notification. Installation and use instruct this processing. Merchants are responsible for lawful customer notices and any required consent.

We receive Shopify order identifiers, financial values, line quantities, catalog identifiers, payment and fulfillment status, store-specific customer identifiers, merchant settings, configured costs and saved assessment factors. We do not request customer names, email addresses, phone numbers, full addresses or payment card details. Contact details incidentally delivered in privacy webhooks are discarded. Shopify credentials are encrypted and excluded from customer exports.

Financial risk scores describe payment, fulfillment, margin and descriptive order-history factors. They do not predict fraud or make automatic fulfillment, cancellation or customer-eligibility decisions. Merchants review the explanations and make their own decisions. Customer history is not shared between stores, sold or used for shared blacklists. We do not install marketing tracking.

The disclosed hosting provider is DigitalOcean. The app's VPS is in Frankfurt, Germany. Shopify delivers authorized data and privacy requests. AI review is disabled in this hosted release; no order data is sent to an AI provider. A new recipient or purpose requires updated disclosure and applicable authorization before processing changes.

The app uses a dedicated PostgreSQL instance with encrypted LUKS2 storage for database files, write-ahead logs and database staging files. Verified TLS protects database connections; HTTPS protects the app. Tokens are additionally encrypted in application storage. App and database runtime processes cannot swap decrypted pages to disk. Tenant boundaries, Shopify authentication and verified webhook signatures restrict access. Encryption does not protect against a compromised authorized server administrator.

Recovery checkpoints are encrypted before transfer to the operator's separate recovery device. A checkpoint restore, encrypted-session recovery and deletion replay have been tested. Checkpoints are retained for no more than 30 days. Recovery requires subsequent privacy deletions to be reapplied before restored records become available. These are operator-managed checkpoints; automatic off-server replication and automatic alert delivery are not provided in this release.

Order history and linked cost/assessment records expire one year after the order's Shopify creation date. Verified customer deletion requests remove matching records sooner. Uninstall stops ingestion, revokes local sessions and queues store deletion. Completed privacy receipts and access selectors expire after 30 days. Keyed suppression markers expire within one year, and inactive installation markers within 90 days.

Customers should contact the merchant where they placed an order to request access, deletion or an objection to processing. Shopify forwards supported privacy requests to the app. Authenticated merchants can prepare scoped exports from Data privacy without an active subscription and must deliver them securely to the verified requester within the applicable deadline. The app does not email customers directly. Contact softstudix@gmail.com for identity reconciliation, export limits, complaints or other assistance.

SoftStudioX restricts operational access and assists merchants with relevant data requests. We notify affected merchants of confirmed security incidents without undue delay, sharing facts available for their response. Required international-transfer arrangements must be established before affected processing; this notice does not claim an unexecuted agreement exists.