1. Who we are
Uncooked ("we", "us", "our") is a Shopify application operated by Little Ripples Pty Ltd (ABN pending), based in Victoria, Australia. We provide 3PL invoice auditing and logistics cost analysis for Shopify merchants.
2. What data we collect
When you install and use Uncooked, we access and store the following data:
| Data Type | Purpose | Source |
|---|---|---|
| Store name & domain | Identify your account | Shopify API |
| Order data (order numbers, tracking numbers, shipping addresses, order totals) | Match invoices to shipments | Shopify API |
| 3PL invoices you upload | Extract charges for auditing | You upload directly |
| Rate cards you upload | Compare against invoiced amounts | You upload directly |
| Email address (for invoice forwarding) | Receive forwarded invoices | You configure |
We do NOT access or store:
- Customer payment information or credit card details
- Customer email addresses or personal identifiers beyond shipping addresses
- Product content, images, or inventory data
- Staff account credentials
3. How we use your data
- Invoice parsing: Your uploaded invoices are sent to Anthropic's Claude AI API for structured data extraction. Anthropic's API does not retain your data after processing (see Anthropic's privacy policy).
- Order matching: We compare invoice line items against your Shopify order data to link charges to specific shipments.
- Audit analysis: We compare actual charges against your contracted rates and published carrier zone matrices to identify discrepancies.
- Dashboard display: Aggregated results are displayed in the app dashboard within your Shopify admin.
4. Data storage & security
- All data is stored in a PostgreSQL database hosted on secure infrastructure.
- Uploaded files are stored in AWS S3 with AES-256 server-side encryption.
- All data transmission uses TLS 1.2+ encryption.
- We use the
ap-southeast-2(Sydney) AWS region to keep data in Australia where possible. - Database access is restricted to application services only — no shared or public access.
5. Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Shopify | App platform, authentication | OAuth tokens, store identity |
| Anthropic (Claude AI) | Invoice & rate card parsing | Invoice document content (transient) |
| AWS S3 | Secure file storage | Uploaded files (encrypted at rest) |
| Postmark | Email ingestion | Forwarded invoice emails |
6. Data retention
We retain your data for as long as the app is installed on your store. When you uninstall Uncooked:
- We receive an
app/uninstalledwebhook from Shopify. - Your account data, invoices, rate cards, and audit results are deleted within 30 days.
- Uploaded files in S3 are permanently deleted.
You may request earlier deletion by contacting us at hello@uncooked.shop.
7. Your rights
Under Australian privacy law and Shopify's requirements, you have the right to:
- Access: Request a copy of all data we hold about your store.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your data at any time.
- Portability: Request an export of your data in a machine-readable format.
To exercise any of these rights, email hello@uncooked.shop.
8. Cookies & tracking
Uncooked does not use cookies, analytics trackers, or advertising pixels. The only client-side storage used is Shopify's own session management for the embedded app.
9. Children's privacy
Uncooked is a business-to-business application. We do not knowingly collect data from individuals under 18.
10. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via the app dashboard or email. The "Last updated" date at the top reflects the most recent revision.
11. Contact
If you have any questions about this privacy policy or how we handle your data:
- Email: hello@uncooked.shop
- Entity: Little Ripples Pty Ltd, Victoria, Australia