TillClose privacy policy

Last updated: July 24, 2026

TillClose is a Shopify app operated by Ellefsen Marketing ("we"). It produces end-of-day closeout reports for Shopify POS locations. This policy describes exactly what data the app touches.

What we access

TillClose reads data from the Shopify Admin API. It is read-only: the app never creates, changes, or deletes anything in your store.

• Order aggregates — sales totals, taxes, refunds, and tender types for the selected location and day, read to compute the closeout report.
• Cash tracking sessions — opening float, expected and counted cash amounts recorded by POS Pro, read for the drawer reconciliation section.
• Locations — your store's location list, so you can pick which register to close out.
• Store metadata — timezone and currency for report formatting, plus Shopify's development-store flag so test shops can be excluded from product metrics.

What we store

• Your shop's myshopify domain.
• The session issued by Shopify, used to authenticate the app.
• Privacy-minimal product events — the feature used (for example, opening the app, loading a closeout, or generating a PDF), the event time and UTC usage day, the selected business date, the app surface, and a yes/no flag indicating whether the report contained POS orders, refunds, or a drawer session.
• TillClose Live signals, when explicitly enabled — cash-session open and close times, whether a completed POS transaction had a refund or discount, and whether closeout preparation succeeded. Location and cash-session references are stored only as one-way hashes.

Reports are computed from your live Shopify data and are never retained on our servers. Product events do not contain report amounts, order or customer identifiers, raw location identifiers, location names, staff identifiers, or error messages. TillClose Live generates a closeout when a supported cash-session close event arrives, then discards the report and PDF bytes; only preparation status is retained.

What we never store

• No order contents (line items, prices, or individual orders).
• No customer data of any kind (names, emails, addresses).
• No payment details.

Data sharing

We do not sell, share, or transfer your data to third parties. Data is processed on Vercel (hosting) and stored in a Postgres database provided by Neon; these subprocessors host data solely to run the service. The small amount of data we store is used solely to operate the app.

Deletion

Uninstalling the app invalidates its access immediately, and the uninstall webhook deletes your stored product events, TillClose Live signals, and session. When Shopify sends the shop redaction webhook after uninstall, every remaining record for the shop is deleted. The GDPR compliance webhooks (customer data request, customer redact, shop redact) are implemented; because we store no customer data, a customer data request has nothing to return. You can also email us at any time to request immediate deletion.

Contact

Questions or requests: ellefsenmarketing+tillclose@gmail.com