Privacy policy
Last updated October 6, 2026
Mint Custom Reports is a Shopify app made by Mint Labs ("we", "us"). It builds sales, product, inventory, tax, refund and customer reports from a merchant's store data. This policy explains what the app handles, why, and when it's deleted. For anything about the merchant's customers we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The app reads orders, refunds, products and stock from Shopify to calculate reports. It only reads; it never changes anything in the store.
- About customers it keeps only Shopify's numeric customer ID on each order, plus Shopify's order count, amount spent and account creation date for that ID. It never requests or stores customer names, email addresses, phone numbers or addresses.
- Email addresses are only those the merchant types in for scheduled reports (the merchant's own team), and the store's contact email.
- We never sell or share data, use it for advertising, or combine it across stores. The app adds nothing to the storefront and sets no cookies there.
Information about merchants and their stores
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To start Shopify bulk exports of orders and products and read the results. |
| Store name, contact email, time zone, currency, which data access Shopify granted | Report dates in the store's time zone, amounts in its currency, the sender name and reply-to of scheduled emails. |
| Orders: number, dates, sales channel, discount codes, totals (sales, discounts, shipping, taxes, refunds) and line items (product, variant, title, SKU, vendor, type, quantities, amounts); refunds (date, amount); tax lines (name, rate, amount) | The sales, products, tax, refunds and customer reports. |
| Products and variants: titles, SKU, vendor, type, status, price, unit cost; stock per location; location names | The inventory value reports. |
| Saved reports, email schedules and their recipients, a log of scheduled emails sent | To show and send the merchant's reports. |
| Plan (Free or Pro) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
Information about the merchant's customers
| What | Why | Kept |
|---|---|---|
| Shopify customer ID on each synced order | Customer counts, new vs returning customers, cohorts and the top customers report (shown by ID; the merchant opens the customer in Shopify). | With the order (up to 25 months) |
| Shopify's lifetime order count and amount spent, and the account creation date, for that ID | Lifetime columns in the customer reports and telling first orders from repeat orders. | Until the customer's orders are removed or a redaction request |
No name, email, phone number or address is ever requested from Shopify, stored, logged or emailed.
Customer privacy requests
- Access requests (
customers/data_request): the app saves what it holds for that customer ID (order numbers, dates and amounts) and shows it to the merchant in the app for 30 days, so the merchant can include it in their reply. - Erasure requests (
customers/redact): the customer ID is removed from every order and the lifetime figures are deleted. The orders stay as anonymous sales figures. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store: synced data, reports, schedules and settings.
Scheduled emails
Scheduled reports are sent through Cloudflare Email Service from no-reply@mail.stickermint.com to the addresses the merchant entered, with the store's contact email as reply-to. Every email has a link that stops that schedule. We don't track opens or clicks.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database, queue and email) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no analytics or trackers. See our security policy.
Retention
- Synced orders: up to 25 months from the order date (the history the reports can show); catalog and stock: replaced at every refresh.
- Export staging data: deleted as soon as each import finishes.
- Scheduled email log: 90 days. Customer data requests: 30 days.
- Access tokens: deleted when the app is uninstalled. Everything else: deleted when Shopify sends the store deletion request 48 hours later.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; customers should contact the store, or email us and we'll help. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs: support@stickermint.com