Privacy Policy

Who we are

LA BASE LLC operates ProfitLAB, a profit reporting service for Shopify merchants. Questions and privacy requests can be sent to labasedrop@gmail.com.

Information we handle

The Shopify app uses your Shopify session to identify your store and check your permissions. It receives store settings, products and unit costs, order and customer identifiers, sales, refunds, and transaction amounts needed for profit reports. It does not request customer names, email addresses, phone numbers, or postal addresses for these reports. Shopify privacy notifications may include customer identifiers or contact details; we retain only the identifiers and a hashed email selector needed to process the request, not a copy of the contact details.

In the separately authenticated private workspace, we process your account email and authentication information, and connected orders can include customer names and email addresses. We also process costs and expenses you enter, team membership, preferences, and, if you connect advertising services, account and campaign performance data. The iOS app may register a device token and notification preferences when you enable push alerts. Support messages contain the information you choose to send us.

How we use it

We use this information to authenticate users, connect services, synchronize data, calculate profit and advertising reports, deliver requested alerts, operate and secure ProfitLAB, and respond to support requests. Store and advertising connection credentials are used to access the services you authorize. ProfitLAB does not use merchant data for third-party advertising or cross-app tracking.

For customer-linked data supplied by a Shopify merchant, the merchant decides why the data is used, and LA BASE LLC processes it on the merchant's behalf to provide the reporting and privacy-request functions described here. ProfitLAB does not sell customer data, share it for targeted advertising, or make automated decisions that have legal or similarly significant effects on customers. The embedded Shopify app does not add storefront tracking or send customer marketing messages. Merchants remain responsible for customer notices and any permissions required for their use of the service.

Service providers and access

We use Vercel for hosting and Supabase for the database and authentication. Resend delivers service email, and Apple delivers enabled iOS push notifications. Connected platforms, including Shopify, advertising providers, and optional Discord notifications in the private workspace, exchange data with ProfitLAB as needed for the features you enable. Shopify users and authorized members of your ProfitLAB team can see the information their assigned access permits. We may disclose information when required by law or to protect the service.

Storage and security

Data is stored on managed cloud infrastructure. We use access controls and encrypt connected service tokens. No Internet service can promise absolute security. Data can be processed in countries where our service providers operate.

Retention and choices

We keep reporting data while the service is connected and needed for your reports. For Shopify app installations, uninstalling stops ongoing access when the uninstall notification is processed. Shopify's subsequent shop-erasure request removes that installation's stored data and credentials. Customer-erasure requests remove the associated customer-linked records; restricted identifier records prevent later synchronization from restoring erased data. We process Shopify privacy requests within 30 days. Data-request exports are available to the store owner in the app and are removed after delivery is confirmed or after 30 days. Minimal request receipts are retained for up to 90 days.

In the private workspace, you can disconnect a store and remove its associated data in Settings. For account deletion, access, correction, or other privacy requests, contact labasedrop@gmail.com. We may need to verify that you control the account before acting. Limited records may remain where required by law or within managed backup retention. You can turn off push alerts in the app or your device settings.

Changes

We may update this policy as the service changes. The effective date above will show when this page was last revised.