ProfitLeak Privacy Policy
This Privacy Policy explains how ProfitLeak, operated by Mascia Luciani in Italy, processes information when a merchant installs or uses the application.
1. Scope
This policy covers information processed through ProfitLeak’s merchant-facing application, backend services, monitoring functions, scan history, and proactive alerts. It does not replace the privacy policies of the connected commerce platform or the merchant’s own privacy obligations toward customers.
2. Information we process
Depending on the features used, ProfitLeak may process:
- pseudonymized installation identifiers and plan/entitlement metadata;
- store, product, variant, catalog, price, cost, currency, and order information needed to calculate profitability findings;
- order identifiers or order numbers where needed to connect findings and proactive alerts to the relevant transaction;
- verified findings, loss amounts, finding categories, data-quality gaps, scan fingerprints, ruleset versions, monitoring history, and recurring-pattern indicators;
- application usage events such as app opens, scans, paid-entitlement recognition, alert delivery, and Action Center opens;
- technical information required for authentication, security, error handling, and service operation.
3. What we intentionally minimize
ProfitLeak is designed around profitability analysis rather than customer profiling. We do not sell consumer personal data and we do not use connected-store data to build advertising profiles. Installation identifiers stored in ProfitLeak’s persistence layer are pseudonymized using cryptographic hashing where applicable.
4. Why we process information
We process information to provide requested scans and paid features, verify plan entitlements, calculate and explain evidence-backed findings, maintain monitoring history, prevent duplicate processing, send proactive alerts, secure the service, troubleshoot errors, measure product usage, and improve service reliability.
5. Legal bases
Where data-protection law requires a legal basis, processing is carried out as necessary to perform the service requested by the merchant, to comply with legal obligations, and/or for legitimate interests such as securing the service, preventing abuse, measuring product reliability, and improving functionality. Where consent is legally required for a specific processing activity, that processing is performed only on the appropriate consent basis.
6. Service providers
ProfitLeak relies on reputable infrastructure and platform providers to operate the service. These include the commerce platform through which the app is installed, Render for application hosting, and Supabase for managed database services. These providers process data only as needed to deliver their contracted services and are subject to their own security and data-protection commitments.
7. Security
We use access controls, server-side authentication checks, encrypted network connections, pseudonymized identifiers, restricted database access, and other technical and organizational safeguards appropriate to the service. No system can guarantee absolute security, but access is designed to prevent unauthorized use or modification.
8. Data retention
We retain information only for as long as reasonably necessary to provide ProfitLeak, maintain monitoring history and auditability, resolve disputes, protect the service, and meet legal obligations. Retention periods may vary by data type and plan. Data that is no longer required may be deleted or anonymized.
9. International processing
Our service providers may process information in jurisdictions different from the merchant’s location. Where required, appropriate contractual or legal safeguards are used for international transfers.
10. Your rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal data related to your use of ProfitLeak. You may also have the right to lodge a complaint with a competent data-protection authority.
11. Merchant responsibilities
The merchant remains responsible for its own legal basis, notices, and obligations regarding customer data processed through its store. ProfitLeak should only be connected to data the merchant is authorized to access and analyze.
12. Changes to this policy
We may update this Privacy Policy when the service, legal requirements, or our data practices change. The effective date shown above indicates the current version.
13. Contact
For privacy requests or questions, use the official ProfitLeak support contact displayed in the app’s marketplace listing.