Privacy Policy
Last updated 6 September 2026
The short version
Duty Ledger reconciles the duties you collected at checkout against what your carrier actually billed you. To do that it needs your orders, your products' customs classification, and the carrier invoices you upload. It does not need — and does not store — your customers' names, email addresses, phone numbers or street addresses.
What we store
- Shop domain, access token and your chosen plan.
- Per order: order number, date, destination country, currency, duty and tax collected, tracking numbers, carrier, and the order's revenue, discount and refund totals.
- Per line item: product and variant identifiers, title, quantity, revenue, unit cost, HS code and country of origin.
- Carrier invoices you upload: the parsed line data (tracking number, duty, tax, brokerage and other fees) and the file name.
- Settings you enter, such as your primary country and default carrier.
Destination country is the only location data we keep. It is required to determine a duty rate — a duty figure is meaningless without knowing which border the shipment crossed.
What we do not store
- Customer names, email addresses or phone numbers.
- Customer street addresses. Only the two-letter destination country code is read.
- Payment details or card data. Billing is handled entirely by Shopify.
- The original uploaded invoice file. Only the parsed rows are kept.
How we use it
Solely to provide the app: matching invoices to orders, calculating variance and landed-cost contribution, and writing corrected HS codes or countries of origin back to your catalogue when you ask it to. We do not sell your data, share it with advertisers, or use it to train models.
Where it lives
Data is stored in a PostgreSQL database hosted on Render in the United States, encrypted in transit over TLS. Access to production is limited to the app's maintainers.
Deleting your data
Uninstalling the app triggers Shopify's shop/redact webhook, and we delete every record belonging to your shop — orders, line items, invoices, parsed invoice lines and matches — within 48 hours. We also honour customers/redact by deleting the specific orders Shopify names, and customers/data_request by reporting what we hold.
You can request deletion at any time without uninstalling by emailing the address below.
Changes
If this policy changes materially we will update the date at the top and notify shops with an active subscription by email.
Contact
Questions about this policy or your data: weplaytechyt@gmail.com