Duty Ledger

Privacy Policy

Last updated 6 September 2026

The short version

Duty Ledger reconciles the duties you collected at checkout against what your carrier actually billed you. To do that it needs your orders, your products' customs classification, and the carrier invoices you upload. It does not need — and does not store — your customers' names, email addresses, phone numbers or street addresses.

What we store

Destination country is the only location data we keep. It is required to determine a duty rate — a duty figure is meaningless without knowing which border the shipment crossed.

What we do not store

How we use it

Solely to provide the app: matching invoices to orders, calculating variance and landed-cost contribution, and writing corrected HS codes or countries of origin back to your catalogue when you ask it to. We do not sell your data, share it with advertisers, or use it to train models.

Where it lives

Data is stored in a PostgreSQL database hosted on Render in the United States, encrypted in transit over TLS. Access to production is limited to the app's maintainers.

Deleting your data

Uninstalling the app triggers Shopify's shop/redact webhook, and we delete every record belonging to your shop — orders, line items, invoices, parsed invoice lines and matches — within 48 hours. We also honour customers/redact by deleting the specific orders Shopify names, and customers/data_request by reporting what we hold.

You can request deletion at any time without uninstalling by emailing the address below.

Changes

If this policy changes materially we will update the date at the top and notify shops with an active subscription by email.

Contact

Questions about this policy or your data: weplaytechyt@gmail.com