Privacy Policy

Last updated: April 17, 2026

This Privacy Policy describes how Keel Analytics LLC ("Naksalite", "we", "us") collects, uses, and shares information when you use the Naksalite application (the "App") on the Shopify platform.

Naksalite is designed to collect the minimum data needed to render geographic visualizations of your store's orders. We do not sell, rent, or trade your information, and we honor all data subject rights granted by the GDPR, UK GDPR, CCPA/CPRA, and Shopify's Protected Customer Data requirements.

1. Who we are

Naksalite is owned and operated by Keel Analytics LLC, the "Data Controller" for information collected through our marketing site and the "Data Processor" for Shopify merchant data processed through the App. You can contact us at any time at support@naksalite.com.

2. What data we collect

2.1 From your Shopify store

When a merchant installs Naksalite, Shopify grants us access to the following data through its Admin API, under the scopes you explicitly approve at install:

• Order data: order IDs, timestamps, totals, currency, line items, tags, fulfillment status.
• Customer location data: shipping city, state/region, country, and postal code (required to render maps).
• Shop metadata: shop domain, plan, time zone, and install date.

We do not collect or store customer email addresses, phone numbers, full shipping addresses, payment information, browsing behavior, or storefront activity.

2.2 From our marketing site (naksalite.com)

If you email us or submit our contact or data-deletion forms, we store the information you provide (name, email, store URL, message) to reply to your request. We use privacy-respecting, server-side logging only — we do not run Google Analytics, advertising pixels, or third-party trackers on our marketing site.

3. How we use this data

We process your data for the following, strictly limited purposes:

• To render order and customer maps, filters, and aggregate statistics inside the App.
• To operate, secure, and improve the App (logs, diagnostics, error monitoring).
• To bill you through Shopify's standard app billing.
• To respond to your support, billing, and privacy requests.
• To comply with our legal obligations.

We do not use your data to train machine-learning models, build marketing profiles, or target advertising.

4. Legal bases (GDPR / UK GDPR)

Purpose	Legal basis
Operating the App for you	Performance of a contract (our Terms of Service)
Security, logging, diagnostics	Legitimate interests (securing the service)
Replying to your messages	Legitimate interests; consent where applicable
Complying with legal requests	Legal obligation

5. Sharing & sub-processors

We use a small number of vetted sub-processors to operate the service. As of April 17, 2026:

Sub-processor	Purpose	Region
Shopify Inc.	Platform & billing	CA / US
OVHcloud US, Inc.	Hosting (primary)	US (Virginia)
Let's Encrypt (ISRG)	TLS certificates	US
Mapbox / OpenStreetMap	Base map tiles (no customer PII sent)	US / EU

We do not sell, rent, trade, or otherwise transfer your data to any third party for their own marketing purposes. We will notify you of changes to our sub-processor list through this page.

6. International transfers

Our primary hosting is in the United States. Where personal data originates in the EEA, UK, or other regions with data-export restrictions, we rely on Standard Contractual Clauses or equivalent safeguards for the transfer.

7. Retention

We retain merchant and order data only for as long as your store is connected to Naksalite. When you uninstall the App, we:

• Receive Shopify's shop/redact webhook (48 hours after uninstall);
• Mark your shop's data for deletion within 48 hours of receipt;
• Permanently delete it from primary and backup systems within 30 days.

For individual customer deletion requests, we honor Shopify's customers/redact webhook and remove matching records within 30 days.

8. Security

We apply reasonable technical and organizational measures to protect your data, including:

• TLS 1.2+ for data in transit;
• At-rest encryption of databases and backups;
• Principle-of-least-privilege access controls for our team;
• Regular dependency updates and security reviews.

No system is perfectly secure. We keep data collection minimal precisely so that even in a worst-case scenario, the blast radius is small.

9. Your rights

Depending on where you live, you have the following rights regarding data we process about you:

• Access — request a copy of your data;
• Rectification — ask us to correct inaccurate data;
• Erasure ("right to be forgotten") — request deletion;
• Restriction / objection — limit how we process your data;
• Portability — receive your data in a machine-readable format;
• Complaint — lodge a complaint with a supervisory authority.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt out of "sale" or "sharing" of personal information. We do not "sell" or "share" personal information as those terms are defined under California law.

To exercise any right, visit http://naksalite.com/data-deletion or email support@naksalite.com. We'll respond within 30 days.

10. Shopify's Protected Customer Data

As a partner on Shopify's Built for Shopify program, we comply with Shopify's Protected Customer Data rules. Specifically, we:

• Only request customer-data scopes necessary for Naksalite's core features;
• Do not use Protected Customer Data for any purpose other than rendering the App;
• Implement Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact);
• Keep a written record of data-handling practices available to Shopify on request.

11. Cookies

Our marketing site uses a single strictly-necessary session cookie to prevent CSRF on form submissions. Our App uses Shopify's embedded app authentication and does not set additional third-party cookies.

12. Children

Naksalite is a B2B merchant tool and is not directed to individuals under 18. We do not knowingly collect data from children.

13. Changes to this policy

We'll update this page when our practices change, and update the "Last updated" date at the top. Material changes will also be announced in-app or via email to installed merchants.

14. Contact

Questions, complaints, or rights requests:

Keel Analytics LLC
Privacy: support@naksalite.com
Support: support@naksalite.com
Or use our Data Deletion form.