Privacy Policy

Last updated: April 15, 2026

Yummy Analytics ("Yummy", "we", "us") helps Shopify merchants understand their store performance by pulling data from Shopify and third-party analytics platforms and generating insight reports. This policy explains what we collect, why, and what we do with it.

What we collect

When you install Yummy on your Shopify store, we access:

Shopify shop data — orders, products, customers, inventory, discounts, price rules, fulfillments, locations, and returns. Accessed via read-only scopes you approve at install.
Third-party analytics data — if you connect them, we pull data from Google Analytics 4, Google Search Console, and Meta Ads using OAuth tokens you explicitly grant.
Shop profile — your shop domain, name, and install timestamp.

What we do not collect

We do not collect or store individual customer PII (names, emails, addresses, payment details) as a product feature. Any customer-level data surfaced by Shopify's APIs is used transiently to compute aggregated reports and is not persisted in a customer-identifiable form.

How we use it

Generate reports and insights you view inside the app.
Send generated reports to Anthropic's Claude API for analysis. Anthropic does not retain this data for model training (reference).
Operate the service — authentication, billing, error monitoring.

How we store it

Data is stored in a managed PostgreSQL database hosted on Railway (US region). Third-party OAuth credentials are encrypted at rest. Traffic between your browser, our app, and third-party APIs is encrypted in transit (TLS).

Who we share with

We do not sell your data. We share data only with subprocessors strictly necessary to operate the service:

Railway — hosting and database.
Anthropic — report generation (Claude API).
Shopify / Google / Meta — read-only API access to data you authorize.

Retention & deletion

Uninstall: when you uninstall the app, we stop accessing your data. Shopify sends us a shop/redact webhook ~48 hours later; at that point we hard-delete all your shop's data from our database.
On request: email juras@yummygrow.com to request earlier deletion.
Customer data requests: Shopify's customers/data_request and customers/redact webhooks are received and logged; we process them per GDPR/CCPA requirements.

Your rights

If you are a resident of the EU, UK, or California, you have the right to access, correct, delete, and port your data, and to object to or restrict processing. Contact juras@yummygrow.com.

Changes to this policy

If we materially change this policy, we will notify installed shops in-app and via email before the change takes effect.

Contact

Privacy questions: juras@yummygrow.com
Data controller: Yummy Analytics