Privacy Policy

Who operates FrozenCash

FrozenCash is operated by Théo Ruffin, based in France. For privacy, support, or data-request questions, contact contact.theo.ruffin@gmail.com.

Data accessed

FrozenCash is a read-only embedded Shopify app. To calculate inventory risk and frozen-cash metrics, FrozenCash accesses the shop domain, products and product variants, SKUs, inventory quantities, inventory locations, inventory item unit costs when available, orders, and order line items for sales-history calculations.

FrozenCash does not request or use customer names, customer email addresses, customer phone numbers, billing addresses, shipping addresses, or payment details.

Data temporarily processed

During a scan, FrozenCash temporarily processes orders, order line items, sales quantities, and order dates required for variant-level sales calculations. Raw orders and raw order line items are used only to calculate scan results and are not retained by FrozenCash.

Data stored

FrozenCash persists only the data needed to operate the service:

• Shopify authentication sessions.
• Shop domain.
• Scan-level aggregated metrics.
• Product and variant identifiers.
• Product and variant titles.
• SKUs when available.
• Stock quantities.
• Unit costs when available.
• Calculated inventory-risk statuses.
• Calculated last-sale dates.
• Calculated potential frozen-cash values.
• Variant-level scan snapshots.
• Merchant-created analysis exclusion rules.
• Merchant-created product or variant include/exclude overrides.
• Merchant-entered local unit-cost overrides.
• Merchant analysis settings and scheduled scan preferences.
• Local subscription state synchronized from Shopify App Pricing.
• Onboarding status and setup progress.
• Usage and quota counters.
• First-party product analytics events with aggregate, non-customer properties.
• Weekly summary payloads and read/archive status.
• Merchant-entered weekly summary recipient email addresses when enabled.
• Opportunity review decisions and dismissed insights.
• Recovery plans, merchant-entered notes, and manually entered outcomes.

FrozenCash does not persist customer records, raw orders, or raw order line items.

How data is used

FrozenCash uses Shopify store data and merchant configuration to perform inventory analysis, identify slow-moving or at-risk variants, calculate sales-history coverage, estimate potential frozen cash, maintain scan history, calculate opportunities, maintain recovery plans, track merchant-entered outcomes, schedule optional scans, authenticate merchants, enforce plan entitlements and usage limits, generate in-app weekly summaries, optionally deliver weekly summaries to merchant-entered email recipients, measure activation and conversion with first-party analytics, and operate the service.

Legal basis and merchant instructions

FrozenCash processes store data on behalf of the merchant who installs and uses the app. Merchants control whether the app remains installed and should use FrozenCash only when their Shopify store permissions and privacy obligations allow this inventory analysis.

Data sharing and service providers

FrozenCash does not sell merchant data, does not use merchant data for advertising, and does not provide merchant data to unrelated third parties. Infrastructure and hosting providers may process data only as needed to host, secure, and operate the service.

Data retention and deletion

Raw orders and raw line items are not retained. Scan history is retained while the app remains installed so merchants can compare scans over time.

Merchants can permanently delete all FrozenCash analysis data and configuration for their store from the Danger zone in FrozenCash settings. This does not delete or modify Shopify store data.

When Shopify sends an APP_UNINSTALLED webhook, FrozenCash deletes the shop's stored FrozenCash data. When Shopify sends a shop/redact request, FrozenCash deletes all persisted data belonging to that shop, including sessions, the shop record, scan runs, and variant-level snapshots, exclusion rules, item overrides, local unit-cost overrides, analysis settings, scheduled scan preferences, insights, data-quality review decisions, and recovery plans. FrozenCash also deletes local subscription state, onboarding state, usage periods, product analytics events for the shop, weekly digests, and digest recipients.

Shopify privacy requests

FrozenCash handles Shopify's mandatory privacy webhooks at its compliance webhook endpoint. customers/data_request and customers/redact requests are handled successfully because FrozenCash does not persist customer records or records linked to individual customer IDs. customers/redact does not delete unrelated shop-level inventory scan data.

Security

FrozenCash encrypts data in transit using HTTPS/TLS. Shopify webhook requests are verified with Shopify HMAC signatures before they are accepted. FrozenCash does not modify Shopify products, inventory, orders, customers, checkouts, or payments.

International data processing

FrozenCash is operated from France. Shopify, hosting providers, and infrastructure service providers may process data in other countries as necessary to operate the service.

Merchant and data-subject rights

Merchants can uninstall FrozenCash from Shopify Admin to stop future processing and trigger deletion of the shop's stored FrozenCash data. Merchants or data subjects with privacy questions can contact FrozenCash at the support email above. Shopify privacy requests are also handled through Shopify's mandatory privacy webhook flow.

Policy changes

FrozenCash may update this policy when the app, data handling, or legal requirements change. The last updated date at the top of this page indicates the current version.

Contact

Operator: Théo Ruffin, France. Support email: contact.theo.ruffin@gmail.com.