Smart Reports · Last updated: June 4, 2026
Smart Reports ("we", "us", "the app") is a Shopify app published by Ohanesian Digital Solutions. This policy explains what personal data we process on behalf of merchants who install the app, how we use it, and the rights available to merchants and their customers.
When a merchant installs Smart Reports, we access the following data from the merchant's Shopify store via Shopify's Admin API:
We also store configuration data the merchant provides directly: store domain, report recipient email addresses, report frequency, and which KPIs are enabled.
Personal data is used solely to generate and deliver the email digest reports the merchant configures. We do not sell, rent, or share personal data for marketing, advertising, profiling, or any purpose other than delivering those reports. We do not use personal data for automated decision-making with legal or significant effects.
Order, product, and customer data is fetched live from Shopify each time a report is generated and is not persisted in our database. The only records we retain at rest are the merchant's Shopify session token and the configuration described above.
When a merchant uninstalls Smart Reports, Shopify sends an app/uninstalled webhook and we purge all session records and configuration for that store within 48 hours. When Shopify sends a customers/redact or shop/redact webhook (data deletion request), we honor it within the required 30-day window — though in practice no customer-level records exist in our database, so there is typically nothing to delete.
All data is encrypted in transit using TLS 1.2 or higher. Data at rest in our database is encrypted using AES-256 by our database provider. Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.
We use the following third-party providers to operate Smart Reports. Each is contractually bound to protect data they process on our behalf:
Smart Reports is operated from the United States, and all sub-processors listed above are based in the United States. If a merchant or their customers are located outside the United States, installing and using the app constitutes consent to the transfer of data to the United States for the purposes described in this policy.
Subject to applicable law (including the GDPR and CCPA), data subjects have the right to:
Customers of merchants using Smart Reports should contact the merchant directly to exercise these rights, since the merchant is the data controller. Merchants and customers may also email us at the address below; we respond within 30 days.
Smart Reports does not set tracking cookies, run analytics scripts, or use any form of behavioral tracking. The app uses only the session cookies Shopify requires for authentication of the embedded admin interface.
Smart Reports is intended for use by businesses. We do not knowingly collect personal data from anyone under the age of 16. If we learn that such data has been collected, we will delete it promptly.
We may update this policy from time to time. Material changes will be communicated to installed merchants via email at least 30 days before they take effect, and the "Last updated" date above will be revised.
Questions, requests, or complaints about this policy? Email us at support@ohanesiandigitalsolutions.com.