Data Handling & Processing Summary

A concise summary of how AIOM handles data, for merchants and reviewers.

Roles

The merchant is the data controller; AIOM is the data processor.

Data categories & purpose

• Orders / line items / refunds → profit & margin calculation.
• Payouts → cash reconciliation (Cash Truth).
• Product costs → COGS and contribution margin.
• Customer email (on order) → reconciliation & retention metrics.
• Ad spend (connected platforms) → payback / MER analysis.

Storage & security

• Hosted on Replit infrastructure; PostgreSQL data store.
• Access tokens encrypted at rest; webhooks HMAC-verified.
• All shop-scoped routes enforce per-merchant ownership.
• Secrets and PII are redacted from logs.

Sub-processors

• Shopify (source of store data and billing).
• Replit (application hosting & database).
• Stripe (payment processing scaffolding, where used).

GDPR endpoints

• POST /api/webhooks/shopify/customers/data_request
• POST /api/webhooks/shopify/customers/redact
• POST /api/webhooks/shopify/shop/redact

Contact

support@aiomprofitguard.com