OctaneOS privacy policy

Last updated: October 20, 2026

OctaneOS is a Shopify app made by IOI Solutions (“we”, “us”). It shows merchants a sales, growth and marketing attribution dashboard inside their Shopify admin. This policy explains what store data the app reads, how we use and protect it, and how it is deleted.

Who this applies to

This policy covers merchants who install OctaneOS and, indirectly, the customers of those merchants whose orders the app reads. For customers, the merchant is the data controller and we act as a processor on the merchant’s behalf.

Data the app reads from your store

When you install OctaneOS, it reads the following through the Shopify Admin API:

• Orders: order numbers, dates, totals, discounts, shipping, taxes, refunds, returns, line items, sales channel and discount codes used.
• Order attribution: the traffic source, referring site, landing page and UTM campaign tags that Shopify records for the visit that led to an order.
• Customers: Shopify customer ID, account creation date, number of orders and total amount spent. We use these to count new and returning customers, lifetime value and retention.
• Products: titles, variants, prices, collections and inventory levels.
• Discounts: discount titles, codes and status.
• Store details: store name, currency, timezone and plan.

OctaneOS does not read or store customer names, email addresses, phone numbers or postal addresses. It does not collect payment card data. It does not place cookies or tracking scripts on your storefront.

How we use the data

• To build the dashboard you see in your Shopify admin.
• If your store works with IOI Solutions as a marketing agency client, to give our team the same sales and attribution reporting so we can plan and measure your campaigns.
• To keep the app working: keeping data in sync, troubleshooting and security.

We do not sell store or customer data, share it with advertisers, or use it to train AI models.

Where data is stored and how it is protected

• Data is stored in a managed PostgreSQL database hosted by Sevalla.
• All connections use TLS. Shopify access tokens are encrypted at rest with AES-256.
• Access is limited to the app and authorized IOI Solutions staff.
• The app requests read-only access to your store. It cannot change your store.

Retention and deletion

• When you uninstall OctaneOS, its access to your store is removed immediately. Shopify then sends a deletion request 48 hours later and we delete all of your store’s data at that point.
• When Shopify sends a customer deletion request on your behalf, we delete that customer’s record and visit data, and remove the link between them and their orders.
• When a customer asks to see their data, we provide what we hold to you, the merchant, so you can respond.

Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict the processing of personal data, and to complain to a data protection authority. Contact us to use these rights. Customers of a store should contact that store first.

Subprocessors

• Shopify Inc. (source of the data)
• Sevalla (application hosting and database)

Changes

We will update this page when our practices change and revise the date above.

Contact

IOI Solutions
2219 Main Street, Unit 624, Santa Monica, CA 90405
admin@ioisolutions.com