Privacy Policy

Overview

CashRadar provides operational cash-control alerts for Shopify POS. This policy explains what information the app processes, why it is needed, how it is shared with service providers, and how merchants can request support or exercise applicable privacy rights.

Information processed from Shopify

CashRadar processes the minimum Shopify information needed to authenticate the app and evaluate cash-management rules. Depending on the feature in use, this can include:

• Shop domain, installation state and granted access scopes.
• Shopify authentication and session information.
• POS location and cash-drawer identifiers and names.
• Cash-management session, activity, balance, amount and timestamp information needed to evaluate configured alerts.

CashRadar does not use or store Shopify buyer/customer records for its alerting functionality and does not request order or customer access scopes.

Information provided by merchants

Merchants configure operational settings such as:

• Manager alert email addresses.
• Cash thresholds and target balances.
• Refund, adjustment and discrepancy thresholds.
• Optional register-open monitoring settings.

Information generated by the service

CashRadar creates operational records required to run and secure the service, including alert state, alert amounts, timestamps, delivery status, retry state, reconciliation checkpoints and limited diagnostic logs. The app is designed not to infer theft, fraud, employee intent or other behavioral conclusions from these records.

How information is used

• Authenticate and maintain the Shopify app installation.
• Evaluate the cash rules configured by the merchant.
• Send operational email alerts to configured recipients.
• Verify subscription entitlement through Shopify App Pricing.
• Prevent duplicate alerts and recover safely from transient failures.
• Secure, troubleshoot and operate the service.
• Comply with applicable legal and Shopify platform obligations.

CashRadar does not sell personal information and does not use merchant or buyer information for targeted advertising.

Service providers

CashRadar relies on service providers only as needed to operate the app. These currently include Shopify for the commerce platform and app identity, Render for application/database hosting, Resend for alert email delivery, and Cloudflare for scheduled job execution. These providers process information according to their own terms and privacy commitments.

Retention and deletion

Operational merchant data is retained while needed to provide the installed service, maintain alert integrity and meet applicable legal or security obligations. CashRadar handles Shopify's mandatory privacy webhooks. On uninstall and applicable shop redaction, merchant settings, alert records, reconciliation state and authentication sessions are removed. A minimal pseudonymous lifecycle fence can be retained temporarily to prevent stale work from a previous installation from being processed.

Infrastructure providers can retain short-lived backups or service logs according to their operational retention policies.

Security and international processing

CashRadar uses HTTPS in transit, managed production infrastructure and access controls intended to limit processing to the services needed to operate the app. The primary production application and database are hosted in the European Union. Some subprocessors can process service data in other jurisdictions subject to their applicable safeguards.

Privacy requests and questions

Shopify merchants can contact CashRadar through the Shopify Get support flow shown for the app in Shopify Admin or the Shopify App Store. Buyer/customer privacy requests received by Shopify are handled through Shopify's mandatory compliance webhook process.

When contacting support, do not send Shopify access tokens, passwords, database credentials or payment information.