Privacy Policy

Last updated: July 11, 2026

Daf One is a profit & inventory analytics app for Shopify merchants. This policy explains what data the app collects, how we use it, and how we protect it.

1. Information We Collect

With your consent (granted through Shopify), our app collects and processes the following:

• Store Information: Your Shopify store domain and access tokens
• Order Data: Order details and contents, including customer names, phone numbers and shipping addresses
• Product & Inventory Data: Products, prices and stock levels
• Billing Information: Your subscription plan and transaction history through Shopify Billing

We request only the minimum access needed. We do not access customer accounts or email, and we do not track your store's visitors.

2. How We Use Your Information

We use the collected information to:

• Calculate your real net profit, margins, ROAS and inventory value
• Provide reorder and dead-stock recommendations
• Power an in-app AI assistant that answers questions about your own numbers
• Provide optional WhatsApp order confirmation
• Send you the alerts and reports you enable, and provide customer support

3. Data Storage and Security

Your data is stored securely with industry-standard encryption. Customer personal data and access tokens are encrypted at rest (AES-256-GCM), and all data is transmitted over TLS/HTTPS. We minimize personal data (raw details are stripped and only a one-way phone hash is kept for matching), and no raw customer personal data is ever sent to any AI provider — only aggregated figures.

4. Data Sharing

We do not sell or share your personal data with third parties except:

• With Shopify, the source platform
• With our AI provider, which receives aggregated/pseudonymized figures only (never raw customer data)
• With courier and WhatsApp integrations you choose to enable, only as needed for that feature
• When required by law

5. Your Rights (GDPR Compliance)

You have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Data Portability: Receive your data in a portable format

We honor Shopify's mandatory compliance webhooks: on a customer data request we compile the data we hold, and on a customer or shop redaction request we permanently erase the relevant data.

6. Data Retention

We retain your data for as long as the app is installed, and customer personal data is automatically purged after a retention window once an order is complete. Upon uninstallation, your data will be deleted within 48 hours as per Shopify's requirements.

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page.