Data & API Use
Last updated: 2 November 2026
1. Purpose
ProfitUp uses platform APIs only to provide the profit reporting and ad-management features a merchant chooses to use. This page lists exactly what we request and the rules we follow.
2. Shopify Admin API
ProfitUp reads data through the Shopify Admin GraphQL API. Access scopes requested:
| Scope | Used for |
|---|---|
read_orders | Orders, refunds, transactions/fees and line items for revenue and profit |
read_products | Product variants (SKU, titles) to match costs to products |
read_inventory | Inventory item unit cost (COGS) |
read_shopify_payments_payouts (optional) | Shopify Payments payouts for the cash-flow report |
ProfitUp does not request write scopes for your store and does not request customer scopes (read_customers); it never fetches customer names, emails, phone numbers or addresses.
Mandatory compliance webhooks are supported: customers/data_request, customers/redact, shop/redact, plus app/uninstalled. Every webhook is verified with Shopify's HMAC signature and rejected (HTTP 401) if the signature is invalid.
3. Meta Marketing API
When you connect Meta, ProfitUp requests ads_read, ads_management and business_management. We use them to read ad accounts, campaigns, ad sets, ads, insights and billing summaries, and — only when you click an action — to pause or resume, edit budgets, duplicate, create campaigns/ad sets/ads and set an account spending limit. Every write is confirmed by you and recorded in an activity log in your account. Demo mode never calls Meta.
4. Our commitments
- We use API data only to provide ProfitUp's features to the merchant who connected it.
- We never sell, rent, or broker API data, and never use it for advertising, profiling or to train models for third parties.
- We request the minimum scopes needed and remove access tokens when you disconnect or uninstall.
- Tokens are stored server-side only, never exposed to the browser, and shown only masked.
- We respect platform rate limits, retry with back-off, and do not scrape.
- We delete data on request and on uninstall as described in the Privacy Policy.
5. Platform terms
ProfitUp's use of platform APIs complies with the Shopify API License and Terms of Use, the Shopify Partner Program Agreement, and the Meta Platform Terms and Developer Policies. ProfitUp is not affiliated with or endorsed by Shopify or Meta.
6. Contact
Questions about data use or a deletion request: Summitcore LLC · support@profitup.io · live chat.