Legal
Privacy Policy
Last updated: October 22, 2026
In short: We use your data to run PreBuilt Profit for you. We don't sell personal data, we don't use advertising or analytics trackers on our site, and your store's customer data is processed only to provide the features you use. Store credentials are encrypted. You can ask us for a copy of your data or to delete it at any time.
1. Who is responsible
PreBuilt Profit LLC (30 N Gould St Ste N, Sheridan, SHERIDAN COUNTY, WY 82801 USA) operates PreBuilt Profit and is the controller of the personal data about you as our customer (account and billing data). For the personal data of your store's customers that passes through the Service, you are the controller and we act as your processor, handling it only on your instructions and to provide the Service.
Contact us about privacy at support@prebuiltprofit.com.
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, password (stored only as a secure hash), team members you invite and their roles | You |
| Billing data | Plan, purchase and renewal records, order references and the name and email used at checkout. We do not receive or store full card numbers. | Our payment partner (Explodely); legacy subscriptions via Stripe |
| Connected-store data | Store name and domain, products, prices, inventory, orders, fulfilment and tracking information | Shopify, at your authorisation |
| Your customers' data | Names, email addresses, shipping and billing addresses, phone numbers, order contents, and information used for fraud checks such as the IP address and country on an order | Shopify orders and checkouts; messages your customers send |
| Credentials and settings | Shopify access tokens, supplier API keys (e.g. CJ Dropshipping), advertising-platform connections, automation rules and margins | You and the platforms you connect |
| Support and messages | Emails you send us, and customer support messages routed to your AI Support Inbox | You and your customers |
| Technical data | IP address, browser type, and log entries needed to operate and secure the Service | Your device when you use the Service |
3. How we use data
- To provide the Service (performing our contract with you): syncing products, orders and inventory, publishing and pricing, routing orders to suppliers you enable, sending tracking and order emails you configure, profit reporting and AI-assisted tools.
- To bill you and manage your plan (contract and legal obligations): activating accounts, applying plan limits, handling renewals, cancellations and refunds.
- To keep the Service secure (legitimate interests): preventing fraud and abuse, protecting accounts and diagnosing errors.
- To communicate with you (contract and legitimate interests): service and billing messages, setup reminders and your weekly summary. You can stop optional emails using the link in each one.
- To meet legal obligations, such as tax and accounting record-keeping.
We do not sell personal data, and we do not use your data or your customers' data for advertising.
4. AI processing
AI features process the content needed for the task (for example, product details for a description, or a customer's message for a reply draft). AI processing is performed on infrastructure operated by us or our hosting providers. We do not send this content to third-party AI providers to train their models. AI output is a suggestion: it is subject to your review and to the Service's rules (for example, your minimum margin).
5. Who we share data with
We share data only as needed to run the Service:
- Platforms you connect: Shopify, CJ Dropshipping, DSers/AliExpress and advertising platforms. For example, a supplier receives the shipping details it needs to fulfil an order you route to it.
- Service providers who host and operate the Service for us: web hosting and database, email delivery, and our payment partner (Explodely, and Stripe for legacy subscriptions).
- Google Fonts: our public pages load fonts from Google, which receives your IP address when the font is requested.
- Authorities or others where required by law, or to protect rights, safety and the Service.
- A successor if our business is reorganised or sold, under this policy's protections.
Our service providers may process data in countries other than yours. Where the law requires it, we use appropriate safeguards for such transfers.
6. Cookies
We use only cookies that are necessary for the Service to work: a session cookie that keeps you logged in, a security (CSRF) cookie that protects forms, and an optional "remember me" cookie if you choose it. We do not use advertising or analytics cookies.
7. Security
- Shopify access tokens and supplier API keys are encrypted at rest.
- Passwords are stored only as secure hashes.
- Connections to the Service use HTTPS.
- Access to data is limited to the account it belongs to and the team members it is shared with.
No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the authorities where the law requires it.
8. How long we keep data
- Account and store data are kept while your account exists. Cancelling a subscription or reaching a plan limit does not delete them. Ask us to delete them at any time.
- When you uninstall the app from a Shopify store, Shopify notifies us 48 hours later and we delete that store's connection, orders and product links.
- Customer erasure requests sent by Shopify on behalf of your customers are processed by anonymising their orders and deleting their support messages.
- Copies of payment notifications kept for verification are deleted after 30 days. Billing and transaction records are kept as long as tax and accounting law requires.
- Logs are kept only as long as needed for security and troubleshooting.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or US state privacy laws), you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@prebuiltprofit.com. We will respond within the time the law requires and may need to verify your identity. You also have the right to complain to your local data-protection authority.
If you are a customer of a store that uses PreBuilt Profit, please contact that store first: they control your data. Requests made through Shopify are forwarded to the store owner automatically.
10. Children
The Service is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.
11. Changes to this policy
We may update this policy. If a change is material, we will notify you by email or in the Service. The "Last updated" date above shows the latest version.
Contact
PreBuilt Profit LLC, 30 N Gould St Ste N, Sheridan, SHERIDAN COUNTY, WY 82801 USA
Email: support@prebuiltprofit.com