Privacy Policy

Tally ("the App") is a macOS menu bar application developed by Gianfilippo Cisternino that connects to your Shopify store to display sales data. This policy explains what data the App accesses, how it is handled, and your rights.

What data we access

When you connect your Shopify store, the App requests read-only access to the following scopes via Shopify OAuth:

• read_orders — to display recent orders, revenue, and fulfillment status
• read_reports — to display sales analytics
• read_analytics — to display store performance data

The App does not modify, create, or delete any data in your Shopify store.

How data is processed

• Store data (orders, revenue, checkout events) is fetched directly from Shopify APIs and displayed locally on your Mac. It is not stored on disk and exists only in memory while the App is running.
• Your Shopify access token is stored securely in the macOS Keychain on your device. It is never shared with third parties.
• Checkout webhook events are temporarily processed through a Cloudflare Workers server to enable real-time notifications. These events are stored for a maximum of 24 hours and automatically deleted.

What data we do not collect

• We do not collect personal information about you or your customers.
• We do not use analytics, tracking, or advertising SDKs.
• We do not sell, share, or transfer data to third parties.
• We do not store your Shopify store data on any external server beyond the temporary webhook processing described above.

Authentication

The App uses Shopify's standard OAuth flow. Authentication is handled through a secure server hosted on Cloudflare Workers. The server facilitates the OAuth token exchange and webhook delivery. It does not log or retain any personal data.

Data retention

• Webhook events: automatically deleted after 24 hours
• Access tokens: stored in your macOS Keychain until you disconnect your store
• In-memory data: cleared when the App is closed

Your rights

You can disconnect your store at any time from the App settings. This revokes access and removes the stored token from your Keychain. You can also revoke access from your Shopify admin under Settings > Apps and sales channels.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For questions about this privacy policy, contact: gianfilippo.cisternino@gmail.com