Privacy Policy

Last updated: June 25, 2026

Settled is a read-only Shopify app that explains your Shopify Payments payouts visually and exports accounting-ready summaries. This policy explains what data Settled accesses, what it stores, and the choices you have.

The short version: Settled stores order numbers only. It never stores your customers' names, emails, phone numbers or addresses. It never sells or shares your data, and it never moves money or changes your store. This marketing website itself collects nothing — no analytics, no cookies, no forms; it just serves static pages.

1. Who this policy is for

This policy applies to Shopify merchants who install the Settled app on their store, and to visitors of this website. "Settled", "we" and "our" refer to the makers of the Settled app.

2. This website vs. the app

This site (settled marketing pages) is a static set of HTML/CSS pages with no analytics, no tracking cookies, and no forms — it does not collect anything about you. The rest of this policy describes the Settled app, which you install separately from your Shopify admin and which does access Shopify data as described below.

3. What data Settled accesses

With your permission (granted when you install the app), Settled reads the following from Shopify through its official APIs. Access is read-only — Settled requests no write permissions.

Order data (via the read_orders scope) — used to match each payout line back to the order it came from.
Shopify Payments data (via the read_shopify_payments_accounts scope) — your payouts, balance transactions and disputes.
Shop information — your store domain, name, timezone and currency, so figures are shown correctly for your store.

4. What Settled stores

Settled is designed to hold as little of your data as possible. From your orders, it stores the order number only.

We never store customer names, email addresses, phone numbers or shipping/billing addresses.
We store payout and fee totals, dispute status, your app settings, and an encrypted access token used to talk to Shopify on your behalf.

This keeps Settled within Shopify's Protected Customer Data — Level 1, the lowest data-handling tier, because no customer personal information is retained.

5. How Settled uses your data

Your data is used for one purpose: to run the app for you. Specifically, to

show your payouts, fees, refunds, reserves and disputes visually; and
generate the accounting exports you request.

Settled does not:

sell, rent or share your data with third parties for their own use;
use your data for advertising or marketing; or
perform profiling or any automated decision-making that produces legal or similarly significant effects.

6. Retention & deletion

Settled keeps the minimal data above only for as long as you use the app. Your data is deleted when:

you uninstall the app from your store; or
we receive a Shopify GDPR webhook requesting it — customers/redact (redact customer references) or shop/redact (delete all shop data, sent 48 hours after uninstall).

You can also export everything Settled stores, or request deletion at any time, from the app's Settings → Data & privacy screen.

7. How your data is protected

All traffic is encrypted in transit over HTTPS / TLS.
Your Shopify access token is encrypted at rest (AES-GCM); it is never stored in plain text.
Data is stored in a Supabase (PostgreSQL) database with deny-all row-level security, so rows are not accessible by default.
Secrets and API keys live only in server environment variables — never in our source code or this website.

8. Sub-processors

Settled relies on a small set of trusted service providers to operate. Each processes data only to provide its service to us.

Provider	What it does
Shopify	The platform Settled runs on, and the source of your payout & order data.
Supabase	Encrypted PostgreSQL database that stores your settings and order-number references.
Railway	Application hosting that runs the Settled app and this website.
Inngest	Runs the background jobs that fetch your latest payouts from Shopify.
Resend	Sends you notification emails, such as new-payout or sync alerts.
Sentry	Error monitoring so we can find and fix crashes (data is PII-scrubbed).

9. Your rights

Depending on where you live, you may have rights under the GDPR (EU/UK) or CCPA/CPRA (California) and similar laws, including the right to:

access the data we hold about your store;
correct or delete that data;
export it in a portable format; and
object to or restrict certain processing.

Because Settled stores order numbers only and no customer personal information, most requests can be satisfied instantly by uninstalling or using the in-app delete tool. For anything else, contact us using the details below.

10. Children

Settled is a business tool for Shopify merchants and is not directed to children. We do not knowingly collect data from anyone under 16.

11. Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new "Last updated" date.

12. Contact

Questions about this policy or your data? Email us at support@settled.app.

Settled is a data formatting & visualization tool — not tax or financial advice. The figures it shows and exports are for your reference; you are responsible for the numbers you report and should verify them against your Shopify and bank records before filing.