Who operates ReceiptGuard

ReceiptGuard is operated by Sofia Madrid Otero. Business address: Panama, Panama City, Panamá , calle , 1055, Acalde Diaz. Privacy contact: ouwessj@gmail.com. Support: ouwessj@gmail.com.

Information we process

We process your Shopify shop identity and currency, authenticated staff session information, catalog SKUs, selling prices and inventory-item costs, supplier names, shipment references, business fields you import, calculated discrepancies, resolution records and approved cost-change audit records. Shopify's session adapter may store staff identifiers, names and email addresses supplied during authentication. Operational events and error identifiers support security, troubleshooting and service-use measurement.

ReceiptGuard does not request customer or order API permissions and does not install customer-facing advertising tracking. Do not upload customer information or unrelated personal data. Files may nevertheless contain information you choose to supply. Mapping removes raw unrelated spreadsheet columns from the stored upload preview.

Why we use it

We use this information to authenticate your shop, compare shipment sources, calculate landed costs and margins, retain your business history, verify subscriptions through Shopify, apply explicitly approved inventory-item costs, prevent abuse and support the service. ReceiptGuard does not sell your data or use supplier files for advertising.

Service providers and processing locations

Shopify provides authentication, catalog APIs and billing under its own terms. Replit provides the current application hosting and managed PostgreSQL database. The application deployment is in South America. This statement does not represent the database's unverified physical region. Processing by these providers may occur outside your country. Contact the operator for questions about processing locations and provider arrangements.

Cloudflare Workers runs the scheduled maintenance trigger. It receives a dedicated maintenance authentication secret, scheduled-run identifiers and aggregate maintenance responses. ReceiptGuard does not send it uploaded supplier files, Shopify access tokens or database credentials. Cloudflare processes the associated operational network and execution logs under its service terms.

Access is restricted to authorized operators and service providers. The application uses HTTPS, tenant-scoped authorization and controlled database access. No security system can guarantee that every incident will be prevented.

Retention and deletion

Receipt history, supplier records, analysis, mappings and approved cost-change history remain available while the app is installed, including when a paid entitlement ends. Unmapped upload previews expire after 24 hours. Maintenance removes expired raw preview content; expiration and physical cleanup are separate events. Expired operational locks, transient rate-limit records and expired online sessions are also cleaned. Hashed webhook replay records have a 30-day cleanup cutoff. Recovery of pending lifecycle webhooks requires authoritative Shopify verification; a temporary verification failure retains the minimal pending intent for retry.

Uninstall revokes app sessions and stops access. Shopify's verified shop-redaction lifecycle removes the shop's operational records, including receipts, suppliers, mappings, audit entries and product events. Reinstalling after those records have been deleted does not restore them. Ending billing alone does not delete receipt history.

The managed database currently has a seven-day point-in-time recovery window. Restricted recovery archives are kept separately during recovery validation. These archives are not used for normal service or advertising. On a verified deletion request, the operator reviews retained recovery copies, removes applicable copies where possible and reapplies deletion before using a restored copy. This policy does not promise an unverified fixed retention period for platform access logs or manually retained recovery archives. Contact the operator to request deletion and confirmation of the handling of recovery copies.

Your requests

Contact ouwessj@gmail.com to request access, correction, deletion or restriction of your information. Identity and authority to act for the relevant shop may need to be verified. You can export available discrepancy reports while authenticated. ReceiptGuard responds to Shopify's mandatory customer data requests without requesting customer or order records through those APIs. If a file you supplied contains personal information, provide the relevant shop and receipt reference so the operator can locate and review it. Do not email passwords or access tokens.

Changes

Material changes will be published with an updated effective date. Contact the operator using the details above with questions.