Privacy Policy
Last updated 10 July 2026
Reportiq (“Reportiq”, “we”, “us”) is a Shopify app that turns a merchant’s plain-language request into live reports built from their own store data. This policy explains what we access, why, where it’s stored, and the choices you have. It applies to the merchants who install Reportiq and to the store data we process on their behalf.
Who is responsible for your data
The merchant who installs Reportiq is the data controller of their store’s data. Reportiq acts as a data processor, handling that data only to provide the app’s features. We do not sell data, and we do not use store data to train AI models or for advertising.
What we access
With the merchant’s consent at install, Reportiq requests read-only access to the Shopify data needed to build reports:
- Orders and line items (order details, totals, fulfillment and financial status, shipping method and address, customer name).
- Products and variants (title, SKU, price, inventory, images, status).
- Customers, fulfillments, and locations as referenced by the reports you run.
Reportiq requests read scopes only — it never modifies or deletes your store’s orders, products, or customers. We also store the offline access token Shopify issues so scheduled reports can run while you’re away.
How we use it
- To run the reports you build or schedule and show the results in the app.
- To translate your plain-English request into a report definition (see “AI” below).
- To deliver scheduled reports by email or Slack, and to generate shareable links and Excel exports at your request.
AI processing
When you describe a report in plain English, the text you type and your store domain are sent to Google’s Gemini API to translate your request into a structured report definition. Your report results and customer records are not sent to the AI model — only your request. Google processes this input to return the definition and, per Google’s API terms, does not use it to train its models.
Sub-processors
We rely on a small set of trusted providers to run the service:
- Google (Gemini API) — translating your plain-language request into a report definition.
- Supabase (PostgreSQL, EU / Ireland) — storing report definitions, cached report results, schedules, share tokens, and access tokens.
- Resend — delivering scheduled reports by email.
- Fly.io (EU / London) — application hosting.
- Shopify — the source of your store data and the platform the app runs in.
Where data is stored
Application data is stored in the European Union (Supabase, Ireland) and served from the EU (Fly.io, London). Data is encrypted in transit.
Share links
When you create a “share link” for a report, Reportiq mints a long, random, unguessable token. Anyone with that link can view that one report without logging in. Only share links with people who should see the data. You can revoke a link at any time, and links can be set to expire.
Data retention and deletion
We keep your data only while Reportiq is installed. When you uninstall the
app, we remove your store’s associated data (report definitions, cached
results, schedules, tokens) within 30 days. We also honour Shopify’s
mandatory data-privacy webhooks (customers/data_request,
customers/redact, shop/redact). You can request
access to or deletion of your data at any time by contacting us.
Your rights
Depending on your jurisdiction (including the GDPR and CCPA), you may have the right to access, correct, export, or delete personal data we process, and to object to certain processing. Contact us to exercise these rights; for a shopper’s personal data, we’ll coordinate with the merchant who controls it.
Changes to this policy
We may update this policy as the app evolves. Material changes will be reflected by the “Last updated” date above.
Contact
Questions about this policy or your data? Email haydaaymen@gmail.com.