Privacy policy

Last updated 11 October 2026

Gisto is operated by Northview Labs Inc., a Delaware corporation at 50 Northview Ct, Danville, CA 94506, USA (“Northview”, “we”). This policy explains what we process when a merchant connects a Shopify store to Gisto, and why. Questions go to hello@gisto.app.

What Gisto does

Gisto connects to a merchant's Shopify store and turns order data into daily comparisons, anomaly detection, a morning email, and answers to the merchant's questions. Gisto is used only by the merchant who installed it. It shows aggregated results and never exposes an individual customer's data.

Data we process, and why

We process the minimum needed to produce sales analytics:

Orders: order number, dates, amounts, discounts, taxes, shipping, refunds, financial and fulfillment status, sales channel, discount codes, and line items (product, variant, quantity, price).
Products: title, type, vendor, status.
Customers: only Shopify's opaque customer ID attached to an order, so we can tell new customers from returning ones. We do not collect names, email addresses, phone numbers, or postal addresses.
Store: store name, currency, timezone, the merchant's email address for the daily digest, and an encrypted API access token.
Staff: the name and email address of the person who installed Gisto, and the email addresses the merchant adds as recipients, so we can send them the digest.

Purpose: analytics and reporting for the merchant (period comparisons, insight detection, the daily email, and natural-language answers). We do not use the data for any other purpose, do not sell or share it, and do not use it for advertising.

Retention

Data is kept only while the app is installed. When a merchant uninstalls Gisto, the store's access token is deleted immediately and all of the store's data is erased when Shopify sends its shop/redact request (48 hours after uninstall), and in any case no later than 30 days after uninstall. Customer erasure requests (customers/redact) remove the customer ID from that customer's orders. Data access requests are answered from the same records.

Security

All data is encrypted in transit (TLS) and at rest, including backups.
Shopify access tokens are additionally encrypted at the application level with a key that is not stored with the data.
Test and production data are kept separate.
Access to production data is limited to the people operating the service.

Service providers

We use Vercel (hosting), Neon (database), Resend (email delivery), Anthropic (the AI model that analyzes the store's figures, writes the daily narrative and answers questions; it receives aggregated figures and, when an analysis needs them, individual orders with their number, amounts, products, discount codes and opaque customer ID, never customer names or contact details), TypeSafe (picks a chart for each finding from the finding's text, which can include product names, order numbers, amounts and discount codes), and Cloudflare (DNS and forwarding of our support mailbox). Each processes data only to provide its service to us, under its own data processing terms.

Merchant and customer rights

Merchants can disconnect at any time by uninstalling the app from Shopify. Customers exercise their rights through the merchant; Shopify forwards those requests to us and we honour them as described above. Questions about this policy or a data request: hello@gisto.app, or by post to Northview Labs Inc., 50 Northview Ct, Danville, CA 94506, USA.