Privacy policy

Last updated: 3 November 2026

SimplyCost is a profit analytics app for Shopify stores. It is made by Zapfor Apps, based in Malaysia ("we", "us"). This policy explains what information the SimplyCost app and this website (simplycost.app) collect, how we use it, and the choices you have.

Our role

SimplyCost is used by store owners ("merchants"). When you install it, you choose to share data from your store with us so the app can work. For the little information about your customers that appears in your store's orders, you are in control of that data, and we process it only on your behalf and on your instructions, to provide the app.

Information we collect

From your store, when you install SimplyCost

SimplyCost asks Shopify only for permission to read your store's data. It cannot change anything in your store. With the permissions you approve, we read:

• Store details: store name and address, the owner's name, the store's email and contact email addresses, phone number, city and country, currency, timezone and Shopify plan, and your SimplyCost subscription.
• Orders: order numbers, items (product names, SKUs and vendors), quantities, prices, discounts and discount codes, taxes, shipping charged, refunds, tags, payment gateways and the amount and fees of each payment, and the country and region each order ships to. When you first install, we import your store's full order history; after that, new and updated orders.
• Products: product and variant names, SKUs, prices, the Cost per item you set in Shopify, stock levels, and your locations (names, addresses and phone numbers).
• Shopify Payments: your payouts and the transactions in them (amounts, fees and the orders they belong to). Never your bank details.
• An access token issued by Shopify, which lets SimplyCost read this data.

We do not store your customers' names, email addresses, phone numbers or street addresses. For each order we keep only the country and region it ships to, the link to its order status page, and, where Shopify provides it, the ID of the staff account that processed it. When Shopify notifies us of a new or changed order, the notification can carry more customer details than this: we read only what is listed here and delete the notification once it is processed.

Information you enter in SimplyCost

• Product costs, including spreadsheets of costs you upload.
• Shipping cost rules, handling costs and payment fee rates.
• Expenses and their categories.
• Settings, such as which costs to count, and the email address for app notifications.
• An optional password that locks sections of the app. We store only a hash of it, never the password itself.
• Your answers to questions in the app, such as how you heard about SimplyCost or a feature you would like, and whether we may email you about it.

From ad platforms you connect

If you connect Google Ads, Meta Ads, Microsoft Advertising, Pinterest, Snapchat or TikTok, you sign in with that platform and allow SimplyCost to access your ad accounts. SimplyCost only reads from them: it never creates, changes or pauses your ads. We store the access tokens the platform issues, your name and ID on that platform, your ad accounts' names, currencies and time zones, your campaigns' names, and what you spent each day.

Technical information

• Inside your Shopify admin, Shopify signs you in to SimplyCost. When you open it on its own, at app.simplycost.app, it uses a session cookie to keep you signed in. Two short-lived cookies, lasting 15 minutes or less, are used while you connect an ad account or move between your Shopify admin and the app.
• We use Google Analytics to see how merchants use SimplyCost's pages: which pages are opened, the type of device and browser, and approximate location. We remove your store's name and address from what it records. Google Analytics sets its own cookies.
• Our hosting provider and the app keep standard server logs, such as IP address, time, the page requested and browser type, to run and secure the service.

On this website

simplycost.app uses Google Analytics to understand how visitors use the site: for example, which pages are viewed, the type of device and browser, and approximate location. Google Analytics sets cookies in your browser. You can block them in your browser settings or with Google's opt-out add-on.

How we use information

We use the information above only to provide and support SimplyCost:

• to work out your costs, fees and profit, and show them in your dashboard, reports and profit and loss statement;
• to bring in the ad spend from the accounts you connect, converted to your store's currency;
• to email you about your account: a welcome email, a note when a cost update you started has finished, a password reset link when you ask for one, notices about your plan, and, after you uninstall, one short question about why;
• to check your subscription with Shopify;
• to answer your support requests, keep the service secure and working, and see which features are used so we can improve SimplyCost.

We do not sell your information or your customers' information, we do not use it for advertising, and we never contact your customers.

Who we share it with

We use service providers for hosting, email delivery and analytics, and share information with them only so they can run SimplyCost and this website for us.

SimplyCost also exchanges data with Shopify through its official API, to read your store's data, and with the ad platforms you connect, to read your spend. Subscription billing is handled by Shopify; we never receive your card or bank details.

We may also disclose information if the law requires it, or to a new owner if SimplyCost is sold or merged, in which case this policy will continue to apply to your information.

Where your data is stored

Your data is stored and processed in the United States. If you are outside the United States, your data is transferred there so we can provide the service.

If you are in Europe or the UK

If you are in the European Economic Area or the United Kingdom, we process merchants' information to provide SimplyCost under our agreement with you (the terms you accept when you install the app) and, for things like keeping the service secure and answering support requests, for our legitimate interests in running SimplyCost. Information about your customers is processed on your behalf, as described in "Our role" above.

Your information is transferred to and stored in the United States, outside Europe. Under data protection law you have the right to access, correct or delete your information, and to object to how we use it: email us to do so. You can also complain to your local data protection authority.

How long we keep it

We keep your store's data for as long as SimplyCost is installed. When you uninstall, Shopify notifies us, and once we have confirmed with Shopify that the app no longer has access to your store, we delete your store and all of its data from our database: orders, products, costs, expenses, settings, and your ad connections and spend. Copies can remain in our database backups for up to 7 days.

• Disconnecting an ad platform deletes that connection and its spend history. If you connect a different account on the same platform, we keep the earlier one until you disconnect the platform or uninstall.
• Your answers to questions in the app (such as how you heard about SimplyCost, or a feature you would like) are kept after you uninstall, to help us decide what to build.
• Records we use to fix problems, such as server logs and messages that failed to process or send, are kept for no longer than 30 days.

Your rights and requests

Merchants: you can ask us for a copy of the information we hold about your store, ask us to correct it, or ask us to delete it, by emailing support@zapfor.com. Uninstalling SimplyCost also deletes your store's data, as described above.

Your customers: if you bought from a store that uses SimplyCost, please contact that store first: it controls your information. SimplyCost does not hold your name, email address, phone number or street address. We also act on the data access and deletion requests that Shopify forwards to us on a store's behalf (such as GDPR requests).

Security

All traffic to SimplyCost and this website is encrypted with HTTPS, and so is the connection between the app and its database. Access to the systems that hold your data is limited to the SimplyCost team. Members of our team can open SimplyCost as your store sees it, to answer a support question or fix a problem. Access tokens are used only to call Shopify's API and your ad platforms' APIs. No system is completely secure, but we work to protect your information.

Children

SimplyCost is a business tool for store owners. It is not meant for children, and we do not knowingly collect information from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and if the changes are significant we will let merchants know in the app or by email.

Contact us

Questions about this policy or your data? Email us at support@zapfor.com.