Privacy Policy

TaxDelta: Shopify Tax Discrepancy Scanner

Effective date: October 19, 2026

This Privacy Policy explains how Alpenglow Software LLC ("we," "us," "our"), operator of TaxDelta (formerly Tax Integrity Monitor) ("the App") collects, uses, stores, and protects information when you install and use the App through the Shopify platform.

1. Information We Collect

Data from Shopify APIs

When you install the App, we access the following through the Shopify Admin API:

• Order data (read_orders scope) — Order names, IDs, tax line amounts, tax line rates, tax line titles (jurisdiction names), refund amounts, refund tax details, financial status, and currency. We also read whether an order is marked tax exempt, the order's subtotal and line item subtotals, the currency the customer paid in (presentment currency), and the order's total tax in both your store currency and the presentment currency. We access order data in read-only mode to scan for tax discrepancies caused by partial refunds, undercollection, and collection in unregistered jurisdictions.
• Full order history (read_all_orders scope, if approved) — Same data as above but beyond the standard 60-day window. This protected scope requires separate approval from Shopify's Partner team and enables historical tax audits.

Access to full order history requires that Shopify has approved the read_all_orders protected scope for the App and that you have installed the App with this scope enabled. You may revoke this access at any time by reinstalling the App without granting the scope. The standard read_orders scope (60-day window) remains active regardless.

We do not request write access to your orders. We do not modify any order, refund, or financial data.

Data collected through Shopify session

Shopify provides the following data as part of the standard app authentication process:

• Shop domain
• Staff member name, email address, and user ID
• Account role (store owner or collaborator) and email verification status
• Locale preference
• Session tokens, access tokens, and refresh tokens

This session data is managed by Shopify's official session storage library and is required for the App to function within the Shopify Admin.

Merchant-provided configuration

• Nexus states — US states where you have declared sales tax registration. You provide this information voluntarily through the App's settings to enable unregistered collection detection.
• Monitoring preferences — Scan frequency and notification settings.
• Feedback: if you choose to use the in-app feedback form, we collect a satisfaction rating (1 to 5), your answers to up to three optional free-text questions, and an optional contact email address. You can submit the form more than once.

Usage of the App

The App records your use of its own pages so we can operate and improve it. These are server-side records kept in our own database and linked to your shop:

• Whether in-app prompts (for example, the feedback prompt, an upgrade preview, or a request to leave a review) were shown to you, clicked, dismissed, or completed. We also store on your shop record when each prompt was first shown, clicked, dismissed, or completed, so the App shows each prompt at the right time.
• Which setup steps you have completed (running your first scan, reviewing results, setting up your nexus states, and turning on monitoring).
• App events such as plan changes, reinstalls, and nexus re-checks.
• Technical error reports when something in the App fails: an error code and message. We remove email addresses, IP addresses, tokens, and similar identifiers from these reports before storing them.

This does not use cookies or third-party analytics tools, and it does not record anything outside the App's own pages.

Data we do NOT collect

• Customer or shopper personal information (names, addresses, emails, phone numbers)
• Payment card or banking information
• Product catalog or inventory data
• Theme or storefront code
• Storefront visitor analytics or behavior data
• Marketing or advertising data

We do not use artificial intelligence or machine learning to process your data, and your data is not used to train AI or machine-learning models. If you choose to use Shopify Sidekick (see "Shopify Sidekick" in Section 2), the answers TaxDelta returns to it are processed by Shopify's AI assistant under Shopify's terms, not by us.

2. How We Use Your Information

We use the data we collect solely to provide and improve the App's services:

• Tax discrepancy scanning — We analyze order and refund data to detect tax overpayment from partial refunds, undercollection relative to known state base rates, and accidental tax collection in states where you are not registered. We also flag orders that tax filing software may report incorrectly: tax exempt orders, and orders with US state tax in a currency other than US dollars.
• Scan results — We store findings (order ID, order name, finding type, jurisdiction, expected tax, actual tax, discrepancy amount, and severity) so you can review results in the App's dashboard. For tax exempt orders, a finding also stores the order's subtotal and any tax charged. For orders with US state tax where your store currency or the presentment currency is not US dollars, a finding also stores the store and presentment currencies and the order's total tax in each.
• Subscription management — We store your current billing plan to gate features appropriately.
• App functionality — We use your shop domain and session data to authenticate requests and deliver the App within the Shopify Admin.
• Feedback: we use feedback only to improve the App and, if you gave an email address, to reply to you.
• Usage records: we use records of your use of the App's pages, prompts, and setup steps to operate and improve the App.
• Monitoring summary emails: if you turn on summary emails, we email your store's Shopify account email after each monitoring scan with the number of orders checked, the tax errors found and their amounts, your running total, and links into the App. We read that address from Shopify each time we send and do not store it. Every email has an unsubscribe link, and you can turn the emails off in the App's Settings at any time. Uninstalling the App turns them off.
• Shopify Sidekick (optional): if you ask Shopify Sidekick, Shopify's AI assistant in your Shopify Admin, about your tax scans, Sidekick asks TaxDelta for a summary and TaxDelta returns it. On every plan, the summary contains when your latest scan ran and which order dates it covered, the dollar total of tax refunded or charged by mistake and the number of items to review, how many findings each check found or why it did not run, how many tax exempt, non-USD and edited orders were found, how many refunds and orders TaxDelta could not check, the states you told TaxDelta you are registered in, and on the Standard plan your monitoring setting. On the Standard plan it also contains up to five findings with the largest dollar amounts from your latest scan, each with its order name (for example, #1042), finding type, amount and severity, the value of orders marked tax exempt, and the states (state names only) where tax was collected without a registration or below the state rate. It contains no customer names, contact details or identifiers, no Shopify order IDs, no county or city names, and no order line or refund details. TaxDelta does not receive your questions or Sidekick's replies and does not store the summaries it returns; if a summary fails, we record an error with the failure type and your store's internal ID only. Sidekick is operated by Shopify, which processes your conversations, including these summaries, under its own terms and privacy policy.
• Operator notifications: we email ourselves (the App's operator, never your customers) a notification when feedback is submitted, a daily operational summary, and an alert if a shop data erasure request fails. The feedback notification contains your rating and free-text answers and says only whether you left a contact email, not the address itself. The daily summary contains activity counts and setup progress per store (installs, plan, scans, amounts found, prompt activity), feedback ratings and the number of submissions with a contact email, and error codes. These emails identify your store only by an internal ID, never by your store domain, and never include the feedback contact email address.

For the purposes of applicable data protection laws, you (the merchant) are the data controller for the order and business data you make available through the App. Alpenglow Software LLC acts as a data processor, processing this data solely on your behalf and as described in this policy. For any data we collect directly from you (such as support communications, feedback, or nexus configuration you provide), we act as an independent data controller.

3. How We Process Order Data

Your order data is processed as follows:

1. Orders are fetched from the Shopify Bulk Operations API and downloaded as JSONL files.
2. Each order is analyzed in memory by our tax computation engine, which compares original tax amounts against current (post-refund) tax amounts.
3. Only the scan findings (metadata and discrepancy details) are stored in our database. We store order IDs and order names for reference but do not store full order contents.
4. JSONL files are processed and discarded — they are not retained after analysis.

4. Data Storage and Security

• All data is stored in a PostgreSQL database hosted on Railway (United States), which encrypts its databases at rest.
• Shopify access tokens, the names and email addresses of staff who sign in, and any feedback you send us are also encrypted with AES-256-GCM before they are stored.
• All connections use HTTPS/TLS encryption in transit.
• We do not sell, rent, or share your data with third parties for marketing purposes.
• In the event of a data breach affecting your data, we will notify you and Shopify within 24 hours of discovery, in accordance with Shopify's Partner Program Agreement and applicable law.

5. Third-Party Services

The App uses the following third-party services to operate:

No full order data is transmitted to Inngest or any other external service. Order data is fetched directly from the Shopify API and processed on our application server.

If we add or replace a sub-processor in a way that materially affects how your data is processed, we will update this Privacy Policy and notify you through the App.

6. Data Retention

• While installed — Scan results, findings, and shop data are retained for as long as the App is installed on your store.
• Feedback: deleted 365 days after you submit it, or earlier when you uninstall the App or your shop data is erased.
• Usage records and technical error reports: deleted after 90 days, or earlier when you uninstall the App or your shop data is erased.
• On uninstall: your sessions are deleted immediately, along with your feedback and usage records, and any pending or in-progress scans are cancelled. Your shop is marked as uninstalled. Your scans, findings, nexus configuration, and shop record are kept until Shopify sends a shop data erasure (shop/redact) request, which Shopify sends 48 hours after you uninstall. If you reinstall before then, your existing data is still available.
• Shop data erasure: when we receive the shop/redact request, we permanently delete all data associated with your shop, including scans, findings, nexus configuration, feedback, usage records, and your shop record.
• Email copies: feedback notifications, daily operational summaries, and operational alerts already delivered to our inbox are not part of the App's database and are not removed by this automated deletion. They identify your store only by an internal ID, which can no longer be linked to your store once your shop record is deleted. Contact us to have them deleted. Monitoring summary emails already delivered to your inbox are yours; your summary-email setting and unsubscribe link are deleted with your shop record.
• Aggregate statistics: we keep a separate log of App events: installs, scans started, completed, or failed, plan changes, CSV exports, and uninstalls. Each entry stores the event type, its date, your plan at the time (and, for a plan change, the previous plan), the scan type, whether the scan was an automatic re-check, and, for completed scans and CSV exports, the number of findings and the total discrepancy amount found. Entries do not contain your store domain. Instead, each carries a one-way hash of your store domain combined with a random value stored on your shop record. When your shop data is erased, that random value is deleted with your shop record, so these entries can no longer be linked to your store. These entries are not deleted on uninstall or shop data erasure and are kept indefinitely so we can measure how the App is used across all stores.

7. Your Rights

You have the right to:

• Access — View all scan data and findings through the App's dashboard. Export findings as CSV.
• Deletion — Uninstalling the App immediately deletes your sessions, feedback, and usage records and cancels any pending scans. Your scans, findings, nexus configuration, and shop record are permanently deleted when Shopify sends the shop data erasure request, about 48 hours after you uninstall. Aggregate statistics are kept as described in Section 6. You can also contact us to request deletion without uninstalling.
• Data portability — Contact us to request an export of your stored data in machine-readable format (CSV or JSON).
• Correction — Contact us if you believe any stored data is inaccurate.

We respond to all data requests within 30 days.

8. International Data Transfers

Your data is processed and stored on servers located in the United States. By using the App, you consent to the transfer of your data to the United States for processing.

9. Cookies and Tracking

The App does not use cookies, tracking pixels, or any third-party analytics or advertising technologies. The App records your use of its own pages on our servers to operate and improve it, as described in Section 1. It does not track your activity elsewhere in the Shopify Admin.

10. Children's Privacy

The App is designed for use by Shopify merchants (business users) and is not directed at children under 13. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us