Privacy Policy

Last updated: 7 November 2026

This Privacy Policy explains how Matt's Custom Tools ("we", "us", the "Service") handles information when you connect your Lightspeed Retail (X-Series) store to generate reports.

1. Information we access

When you authorize the Service through Lightspeed's OAuth flow, we access the following data from your store, read-only, solely to build your reports:

Products, product types, brands, and tags
Inventory levels by outlet
Outlets
Sales and line items
Supplier consignments (purchase orders)
Customers (for sales-related reporting)

We also store the account email and store domain associated with your connection, and — if you subscribe — billing details are handled by our payment processor (we never store your full card number).

2. How we use it

We use your store data only to compute and display the reports you request (matrix, replenishment, open-to-buy, and custom reports). We do not sell your data, share it with third parties for their own purposes, or use it to build profiles unrelated to your reports.

3. How we store and protect it

Your Lightspeed access and refresh tokens are encrypted at rest (AES-256-GCM) in our database.
Store data retrieved for reports is processed in memory and cached briefly to reduce API calls; it is not retained as a permanent copy beyond short-lived caches and the report inputs you save (e.g. open-to-buy plans, templates).
All traffic is served over HTTPS.

4. Payment data

Subscription payments are processed by a third-party payment processor (Stripe). Your card details are entered directly with the processor and are subject to their privacy policy. We receive only limited information such as subscription status and the last four digits of your card.

5. Data retention and deletion

You can disconnect your store at any time, which revokes our access. On request, or when you cancel and close your account, we delete your stored tokens and saved report inputs. To request deletion, contact us at the address below.

6. Your rights

Depending on your location, you may have rights to access, correct, or delete the personal data we hold about you. Contact us to exercise these rights.

7. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

8. Contact

Questions about this policy or your data: matthewabou@gmail.com.