Privacy Policy

Who we are

Ghost Revenue is a Shopify app operated by Ghost Revenue LLC. The app analyzes a merchant's store to produce a conversion-optimization audit and recommendations. This policy explains what store data we access, what we do not collect, how we use and protect that data, and how merchants can request deletion.

Contact: carson@ghostrevenue.co. Legal entity: Ghost Revenue LLC. Registered address: 1968 S. Coast Hwy #4588, Laguna Beach, CA 92651, United States. Effective date: October 17, 2026.

What data we access

Ghost Revenue accesses store and business data from Shopify so we can run the audit and recommendations. The scopes we use cover theme, catalog, orders, analytics reports, and store content — not customer identity. Specifically, we access:

• Theme files and settings
• Products and collections
• Orders — totals and timestamps, used to estimate revenue and conversion, and the products and quantities on recent orders, used to find best sellers. We never access customer identity on orders
• Shopify Analytics reports: daily store totals of sessions, carts, checkouts, orders and sales, overall and by device. We never query customer or session-level detail.
• Store policies and online-store content, including pages and blog posts
• Downscaled screenshots of public storefront pages (home, collection, product, cart, and policies) captured during an audit, used so findings can be checked against what was on the page at audit time. Only public storefront pages are captured — never Shopify Admin or payment interfaces. Customer-facing content already published on the storefront (for example reviews or customer photos) may appear in those screenshots. Screenshots are deleted after 30 days, or earlier when the shop is redacted via Shopify's shop/redact webhook, whichever comes first.
• Shop metafields

This is merchant store data used to operate the service. It is not a customer CRM or shopper identity database, and we do not use order data to identify shoppers.

What we don't collect

We do not collect or store customer names, email addresses, phone numbers, or postal addresses. We do not build, store, or sell individual shopper profiles. We do not sell personal data. Order access is limited to totals, timestamps, and the products and quantities on recent orders, which we use to find best sellers; we never access customer identity. Ghost Revenue runs nothing on your storefront: no web pixel and no theme scripts.

How we use it

We use the store data listed above to analyze the merchant's storefront and produce conversion-optimization audits, recommendations, and related in-app insights for that merchant. We do not use this data to advertise to shoppers, and we do not sell it to third parties.

Who we share it with (sub-processors)

To run the service we share data with these providers, only as needed for their role:

• Anthropic (Claude) — store content and metrics sent for AI analysis that powers the audit and recommendations
• Supabase — database and file/screenshot storage
• Trigger.dev — background job processing (for example audit and sync work)
• Resend — notification emails sent to the merchant
• Google PageSpeed Insights — store URLs sent for performance scoring
• Fly.io — application hosting for the Ghost Revenue app

We do not share shopper personal data with these providers because we do not collect it.

Security

Data is encrypted in transit using TLS/HTTPS and encrypted at rest with database-level encryption. Sensitive credentials — such as storefront passwords — are additionally encrypted at the application layer using AES-256-GCM. Access to merchant data is limited to people and systems needed to operate the service.

Data retention & deletion

We retain merchant data while Ghost Revenue is installed on the store. When the app is uninstalled, that data is deleted automatically when Shopify sends the shop/redact webhook, 48 hours after uninstall. Until October 2026, Ghost Revenue collected storefront funnel events with a web pixel. It no longer does. Those raw events are deleted 30 days after collection. Daily totals made from them are deleted on shop/redact, if not sooner. Audit screenshots of public storefront pages are kept for at most 30 days and then pruned, or deleted earlier on shop/redact, whichever comes first.

We honor Shopify's mandatory privacy webhooks: customers/data_request, customers/redact, and shop/redact. Merchants may also email carson@ghostrevenue.co to request deletion.

Merchant rights & choices

Merchants can uninstall the app to trigger automatic deletion, or contact us to request access to or deletion of their store data held by Ghost Revenue. Because we do not store shopper personal data, consumer requests for customer PII generally do not apply to data we hold; we still process Shopify's mandatory privacy webhooks as required.

Aggregated benchmarks

We may use anonymized, aggregated benchmarks across stores to improve insights. These benchmarks apply a minimum threshold of 5 stores (k-anonymity) and never expose store- or merchant-identifying data.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes will be reflected here. Continued use of Ghost Revenue after an update means the revised policy applies to that use.

Contact

For privacy or data-protection questions, email carson@ghostrevenue.co.

Ghost Revenue LLC
1968 S. Coast Hwy #4588
Laguna Beach, CA 92651
United States

Related: Terms of Service.