Privacy Policy

Commission Powertools (Shopify app) · Effective October 30, 2026 · Terms of Service

Commission Powertools is a Shopify app that works out sales commission for a store's staff from point-of-sale (POS) sales. It is built and operated by Frank Higgins ("we", "us"). This policy explains what data the app collects, why, where it is kept, who it is shared with, and how long it is kept.

The Shopify store that installs the app (the "merchant") decides how the app is used. For data about the merchant's staff and sales, the merchant is the controller and we act as a service provider (processor) on the merchant's behalf.

Summary

The app does not collect or store any information about the store's customers: no names, emails, phone numbers, addresses or payment details.
It stores sales line items (what was sold, for how much, and which staff member was credited) so it can calculate commission.
It stores the store's staff names, commission settings, PINs (scrambled, never readable) and any commission agreements they sign.
We never sell data, use it for advertising, or share it beyond the services needed to run the app.
When a store uninstalls the app, all of that store's data is deleted within 48 hours of Shopify's deletion request.

What we collect and why

Data	What it includes	Why
Store details	Store domain and name, time zone, the app's Shopify access tokens, billing plan status, and the app settings the merchant chooses (pay schedule, return window, exclusions, agreement terms).	To connect to the store, bill for the app, and apply the merchant's settings.
POS sales	Order number and ID, date, location, whether it was cancelled; for each item: title, SKU, vendor, quantity, price, discount and tax amounts, discount names, and the staff member(s) Shopify credited; refunds (date, item, quantity, amount).	To calculate each staff member's commission, returns and spiffs.
Staff members	Shopify staff ID, name (from Shopify where the store allows it, or typed in by the merchant or the staff member), commission plan and quota, a scrambled PIN, PIN lock status, credit changes and disputes they raise, and commission agreements with the name they type to sign. If the store turns it on, a photo taken with the register's front camera at the moment of signing (the person is told on screen first); it is kept with that agreement and is not used for face recognition or anything else.	To show each person their own commission, let them confirm sales credit, and keep a signed record of their commission terms.
Admin users	For the store owner, collaborators and managers who open the app in Shopify admin: Shopify user ID, name, email address, and their role (owner, collaborator, manager).	To decide who may see and change commission data.
Activity log	Who changed what and when (for example "changed a plan", "locked a pay period", "signed an agreement"), including the register login used.	So the merchant has an audit trail of changes that affect pay.

Customer data

Shopify includes customer information in the order messages it sends to apps. Commission Powertools removes it as each message arrives. It never writes customer names, emails, phone numbers, addresses, notes, item personalization or payment details to its database. We therefore hold no customer personal data, and customer data requests from Shopify are answered with "no data held".

Browser storage

The app sets no cookies of its own. The admin page saves, in your browser only, which setup-checklist items you dismissed. Shopify's own admin and point-of-sale apps use their own cookies under Shopify's privacy policy.

How the data is used

Only to provide the app: calculating commission, showing staff their figures on the register, producing payroll exports, keeping commission agreements, and supporting the merchant. We do not use the data for advertising, do not sell or rent it, and do not use it to make automated decisions about anyone other than the commission calculations the merchant sets up.

Who we share it with

We use these service providers to run the app. Each only processes data to provide its service to us:

Shopify, the platform the app runs on. Sales and staff data come from Shopify, and billing is handled through Shopify.
Supabase hosts the database and server functions, in the United States (AWS us-east-2, Ohio).
Render hosts the app's admin web page, also in the United States. No store data is stored there.

We may disclose data if the law requires it. If the app is ever transferred to a new owner, this policy would continue to apply to the data, and merchants would be told.

How long we keep it

While the app is installed: sales, staff, settings, locked pay-period statements, signed agreements and the activity log are kept, because they are the merchant's pay records.
Shopify order messages: the stored copy (already without customer data) is deleted as soon as it is processed. A copy that could not be processed is kept for retries for at most 30 days.
After uninstall: Shopify asks us to delete the store's data 48 hours after uninstall. We then delete everything held for that store, except the store's web address and the date it first installed the app, which we keep so the free trial is offered only once. If the store reinstalls before then, the data is kept.
Weekly safety copies: once a week we keep a copy of each store's pay records (settings, plans, staff names and plans, locked pay periods, agreements, credit changes and disputes; never PINs, access tokens or customer data) for 8 weeks, so a mistake noticed later can be undone. They are deleted with the rest of the store's data after uninstall.
Earlier deletion: a merchant can ask us to delete their data at any time at the email below.

Security

All traffic uses HTTPS, and the database is encrypted at rest by our hosting provider.
Every request is checked against Shopify's signed session or webhook signature, and every record is tied to its store, so one store can never see another's data.
Staff PINs are stored as salted one-way hashes (PBKDF2). Wrong tries are limited and locked out.
Only the store owner, collaborators and the managers they choose can open the admin. Only the developer can access the database.
If a security incident affects a store's data, we will notify the affected merchants without undue delay so they can meet their own obligations.

Your choices and rights

Merchants can see and change their data in the app, download payroll exports and print signed agreements, ask us by email for a full copy of their store's data, and delete it by uninstalling or by emailing us.

Staff members can see their own figures and agreements on the register, and can ask their employer (the merchant) to correct or delete their information. We will help the merchant respond to such requests. If you contact us directly, we will pass your request to your employer, since they control your records.

Depending on where you live (for example under the GDPR in the EU/UK, or US state privacy laws such as California's), you may have rights to access, correct, delete or move your personal information, or to object to its use. Contact us and we will respond within the time the law requires.

Children

The app is for businesses and their staff. It is not directed at children and we do not knowingly collect children's data.

Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how data is used, we will tell merchants with a notice at the top of the app before it takes effect.

Contact

Frank Higgins, developer of Commission Powertools
Email: frank.higgins@gmail.com