Terms of Use

Effective 19 August 2026.

These terms are between Nordscale Strategies AB, organisationsnummer 559525-5562, VAT number SE559525556201, with its registered office in Enköping, Sweden ("we", "us"), and the business that holds a Profitscaler account ("you"). By creating an account, you agree to them. We will give you the full registered address on request.

This is a service for businesses. It is not offered to consumers, and the consumer rules for distance selling do not apply.

The data processing annex at the end is part of these terms. It is the Article 28 agreement covering the personal data inside your orders, and it applies automatically — there is nothing to request and nothing to sign.

The short version

• Your first 500 orders are free. No card, no time limit.

• After that you pay for a monthly allowance of orders. Unused orders roll over for as long as you stay subscribed, and going over does not cost more per order.

• Your data is yours. We never sell it and never use one customer's data for another. We do not train AI or machine-learning models on it without your explicit agreement. We do build anonymous aggregates across all our customers — section 6.

• Profit is only as good as the costs you give us. Section 7 is the honest list of what the numbers do and do not promise. It is the part worth reading.

• We do not change your bidding. The profit conversion starts as a secondary action that records without spending. Promoting it is your decision, and we will do it with you.

• There is no uptime guarantee today. Section 8 says so plainly.

1. What the service does

Profitscaler calculates the profit on each of your orders — revenue less cost of goods, VAT, shipping, payment fees and handling — and can send that figure to Google Ads as a conversion value, so bidding can optimise on profit instead of revenue. It also reports those figures back to you in your dashboard and, if you want, to your reporting tools.

To work, it needs three things from you: a product feed with your cost prices in it, your cost settings, and a server-side Google Tag Manager container configured to call us on each purchase. A fourth is optional: a small tag for your website's own container that records which marketing link led to each order, so your dashboard can show profit per channel. The service works fully without it.

Setting up that container is your responsibility. We provide instructions and we will work through it with you — section 8 says what our support covers — but we have no access to your tag manager, your website or your Google Ads account unless you give it to us separately.

2. Your account

One account belongs to one business. An account can hold several stores — one brand selling into several countries, for example.

One email address belongs to one account. We will refuse to attach an address that already belongs to another account. This is a security rule rather than an administrative one: account membership grants access to everything in the account, so attaching one address to two accounts would give one business access to another's data.

You are responsible for who you give access to. Sign-in is by a link sent to your email address or through your Google account, so anyone who can read that inbox can reach your account.

Your API key can read your product costs. Treat it like a password. If you gave it to an agency and stop working with them, tell us and we will issue a new one.

3. The free trial

Your first 500 orders are free. There is no card, no time limit and no expiry — however long those orders take to arrive, they are free.

The allowance belongs to your account and is shared across every store in it. If you sell in several markets, the 500 orders are counted across all of them together rather than granted to each.

We count orders rather than days on purpose: the hardest part of setting this up is the server-side container, and a trial measured in days would punish whoever takes three weeks to get it working.

Worth being explicit about:

• We can raise your allowance, and we will talk to you about it if your volume means 500 orders passes in a few days. Just ask.

• Your orders keep being received and calculated after the allowance runs out. We do not stop measuring. We stop showing you the detail and stop sending the profit figure to Google Ads. Nothing is lost, and it all appears when you subscribe.

• Nothing is sent to Google Ads once the allowance is used up — not a zero, not an estimate. A gap is honest; a made-up number in your conversion data is not, and it would take months to notice.

• Subscribing is something you choose to do. We will not convert you automatically. There is no card to charge.

4. Subscription and payment

If you subscribe, the price is the one published at profitscaler.io/pricing when you subscribe. Prices are in EUR and exclude VAT.

What you buy is a monthly allowance of orders, chosen from the published steps. Everything the service does is included at every step. The step sets how many orders it covers, not which features you get.

Unused orders roll over. Each month adds your step's allowance to your balance, and each order tracked draws it down. Unused orders roll over for the whole length of your subscription — they do not expire while you are subscribed. If you pay annually, the whole year's allowance is granted at the start of the year. Your balance and the orders that have drawn on it are shown in your account, so you can check the number against your own order count.

If you go past your balance, we do not stop tracking and we do not charge a higher rate. Orders past your balance are billed at the same price per order your step already states, added to your next invoice in blocks. A block is 10% of your step's monthly allowance.

Changing step. You can move up or down at any month boundary, in either direction, and the balance you have already built stays with you. Changes take effect from the next period. We do not prorate.

One account is one brand. An account covers one brand: storefronts run by the same merchant, trading under the same brand name, selling substantially the same catalogue across markets. There is no per-store or per-domain charge, and every store in the account draws on the same balance.

Storefronts that differ in brand or in catalogue are separate accounts, whatever legal entity owns them. If we find unrelated brands sharing one account, we will split it into one account per brand at the next month boundary, each on its own step, with the balance divided in proportion to the orders each brand has tracked. We will not charge you retroactively for the period before the split.

Payments are handled by Polar as merchant of record. They are the seller of record for the transaction, they handle VAT, and your card details go to them and not to us.

Monthly subscriptions can be cancelled with 30 days' notice. Annual subscriptions are billed in advance and run to the end of their term.

If a payment fails, we email you and nothing else happens. Nothing is suspended, nothing is deleted, and we would much rather sort it out than enforce anything.

If it is still unpaid 14 days later, we may pause the service. Pausing works exactly like reaching the end of the free trial: your orders keep being received and their profit keeps being calculated, but the dashboard detail is hidden, the exports stop, and nothing is sent to Google Ads. Nothing is lost, and it all reappears when the payment goes through.

If it is still unpaid 60 days after the first failure, we may close the account under section 10. We will give you at least 14 days' notice by email before we do, and once it is closed your data is handled under section 10 and annex A8 — which gives you 30 days to ask for it back.

We would rather hear from you than run this ladder. If cash flow is the problem, say so and we will work something out.

5. Acceptable use

You may not:

• create accounts by automated means, or in bulk. The signup form is rate limited; getting round that limit, or scripting against it, breaks these terms whether or not it works;

• create extra accounts to get further free allowances for a store that has already used its own;

• give a false email address, or sign up for a business you have no authority to sign up for;

• try to reach another account's data, probe our systems for vulnerabilities without telling us, or interfere with the service for other people;

• resell or redistribute the service without a written agreement with us. Using it for your own clients as an agency is fine and is something we support — talk to us;

• send us data you are not entitled to send, including personal data you have no lawful basis to share.

If you breach this section we may suspend or close your account. We will tell you why.

6. Your data

Your data is yours. Your product costs, your settings, your order history and the profit figures calculated from them belong to you. We use them to provide the service. We do not sell them, and we do not use one customer's data to do anything for another.

We do not train AI or machine-learning models on your data without your explicit agreement. Anything the service works out from your numbers is worked out for you, from your own data. Before any of it is used to train something that serves anyone else, we will ask you plainly, and you can say no without it affecting anything else.

We do build anonymous aggregates, and we think you should know exactly what that means. Combining figures across every store on Profitscaler is how we learn things no single store can see — what a normal return rate looks like in a category, how shipping costs move over a year, whether margins are being squeezed everywhere or only here. We use those aggregates to run and improve the service, and we may publish them as benchmarks or research.

The rules we hold ourselves to:

• An aggregate never identifies you. Not your name, not your domain, not your store.

• No figure is built from so few stores that any one of them could be picked out of it. If a category has three sellers in it, there is no benchmark for that category.

• Your costs, your suppliers and your order history are never published, in any form, aggregated or not.

• We never name you as a customer — in a case study, a logo wall or anything else — without asking you first.

• You can tell us to leave you out. Email us and we will exclude your account from the aggregates. It costs you nothing and it changes nothing else about the service.

Order data reaching us contains personal data about your customers. For that data you are the controller and we are your processor, on the terms of the data processing annex below. Our privacy policy at profitscaler.io/privacy covers the data we hold about you.

You can export your reporting data on a subscription, and during the free trial until you reach its order allowance. If you reach the allowance without subscribing, the exports pause — your orders keep being received and their profit keeps being calculated, and the full history, including everything measured while exports were paused, is available again when you subscribe.

On termination we will delete your data on request. We may keep aggregated figures that identify nobody, and records we are legally required to keep.

7. What the numbers do and do not promise

This section describes how the calculation actually behaves. It is here because these are the things you would otherwise find by reconciling two screens and concluding one of them is broken.

We calculate from the cost data you give us. Profit is only as accurate as the cost prices in your feed. If a cost is wrong, missing, or stated including VAT when it should exclude it, the profit we report is wrong in exactly that proportion, and nothing in the system can detect it. Where we are working from an assumption rather than a measurement — an estimated cost, a margin rule you gave us, a product with no cost at all — we mark it as such in your dashboard. Read those markers rather than assuming every figure is measured.

Cost prices must exclude VAT. A cost stated including VAT parses perfectly and quietly understates your margin on every product. We cannot detect this.

A loss-making order is reported to Google Ads as 1, not as a negative. Google rejects negative conversion values and treats a zero as a conversion worth nothing, which distorts your averages. So we report a floor value instead. Your dashboard shows the real figure, including the loss. The two will disagree on loss-making orders, and both are correct.

If we are unreachable, your container sends an estimate. So that a conversion is never lost, the container falls back to a percentage of order revenue — which you configure — when it cannot reach us. That value is an estimate and is not a profit figure. It is a deliberate safety behaviour, not a failure.

We do not change your bidding, and we do not recommend you do it alone. The profit conversion starts as a secondary conversion action, which records without bidding. Promoting it to primary — the point where it starts spending your money — is a deliberate step, it is yours to take, and we will do it with you. What your campaigns do is your decision and your responsibility.

8. Availability and support

Support is by email, at hello@profitscaler.io, in English or Swedish, and a person answers it. We aim to reply within one working day and usually do — that is a description of how we work, not a guaranteed response time. Setting up your server-side container is the one place we go further and will work through it with you, because it is the hardest part of this and getting it wrong is expensive.

We aim to keep the service running and we monitor it, but we do not offer a service level agreement or an uptime guarantee. If you need one, talk to us before you depend on this for anything you cannot afford to have wrong.

If the service is unavailable, your orders are still recorded on your own side and your container sends its fallback estimate as described in section 7. You do not lose conversions; the values for that period are estimates rather than measurements.

We may change, suspend or discontinue parts of the service. If a change removes something you rely on, we will give you reasonable notice.

9. Liability

Nothing in these terms excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.

Subject to that, our total liability to you in any twelve-month period is limited to the amount you paid us in that period. We are not liable for lost profits, lost revenue, lost advertising spend, or the consequences of bidding decisions made using figures the service produced.

We give no warranty that the service will be uninterrupted or error-free, or that the figures it produces are fit for any particular purpose. Section 7 describes what they are.

10. Termination

You may close your account at any time. Tell us and we will do it.

We may close your account for a breach of section 5, or if you stop paying. Other than for a breach of section 5, we will give you notice and a chance to put it right.

11. Changes to these terms

We may update these terms. If a change materially affects your rights or what you pay, we will tell account holders by email at least 30 days beforehand, and you may cancel before it takes effect.

12. Our software, your numbers, and other people's names

The service is ours. Profitscaler — the software, the dashboard, the calculation, the container template, the documentation and the name — belongs to us, and using it transfers none of that to you. While your account is open, we grant you a non-exclusive, non-transferable right to use the service for your own business, and for your clients' businesses if you are an agency. That is the whole of the licence. It does not let you copy the software, take it apart to work out how the calculation works, or build a competing service out of it.

What comes out of it is yours. The profit figures, the reports and the exports are your data — section 6 — and you can do whatever you like with them. We put no restriction on how you use your own numbers, including in a tool that competes with ours.

Feedback. If you tell us how to make the product better, we may act on it and owe you nothing for it. We will not quote you by name without asking first.

Other people's names. Google, Google Ads, Google Analytics, Google Tag Manager and Google Merchant Center are trademarks of Google LLC. We use those names to say what our service works with, which is what they are for. We are not affiliated with, endorsed by or sponsored by Google, or by any other platform we connect to, and nothing on our site should be read as one of them endorsing us.

13. The rest of it

The clauses that only matter when something has gone wrong.

These terms are the whole agreement between us about the service, and they replace anything said before them — in an email, on a call, or on our website. Nothing here excludes liability for anything said fraudulently.

If one part fails, the rest stands. If a court finds any part of these terms unenforceable, that part is removed, or narrowed to the least extent that makes it work, and the rest carries on.

Not enforcing something once does not give it up. If we do not act on a breach, or we let a deadline pass, we have not waived the right to act the next time.

Transferring the agreement. You may not transfer these terms to anyone else without our written agreement. Selling your business to someone who carries on running the same store is not what that is aimed at — tell us and we will move the account. We may transfer these terms to a company that acquires our business, or the part of it that runs Profitscaler, and we will tell you if that happens.

Things outside anyone's control. Neither of us is liable for failing to do something because of an event we could not reasonably control — a general internet or power failure, a natural disaster, a war, or an outage at a provider we both depend on. It does not excuse paying money you owe.

How we reach each other. We write to the email addresses on your account. You write to hello@profitscaler.io. Email counts as writing for everything in these terms, notices included.

14. Law and disputes

These terms are governed by Swedish law. Disputes go to the Swedish courts, with Uppsala tingsrätt as the court of first instance.

15. Contact

hello@profitscaler.io

Nordscale Strategies AB · organisationsnummer 559525-5562 · VAT number SE559525556201 · registered office in Enköping, Sweden.

Annex — Data processing

This annex is the agreement required by Article 28 of the GDPR. It is part of the Terms of Use above and applies to every account automatically. You do not need to ask us for a separate DPA, and there is nothing to sign.

It covers the personal data inside your orders, which we process on your behalf. The personal data we hold about you — your account details — is ours to answer for, and is covered by the privacy policy at profitscaler.io/privacy rather than by this annex.

Where this annex and the terms above disagree about personal data, this annex wins.

A1. Who is who

You are the controller. You decide what is collected and why. You confirm that you have a lawful basis for the processing you ask us to do, that you have given your own customers whatever notice they are owed, and that you are responsible for the lawfulness of the data you send us.

We are the processor. We process only on your documented instructions. These terms, the annex, and the settings you choose inside the service are those instructions. If an instruction looks to us like it breaks data protection law, we will tell you, and we may pause that processing until it is resolved.

A2. The scope is unusually narrow, and it is worth understanding why

Your website sends order data to Profitscaler so the profit on each order can be calculated and returned.

Our order interface accepts a fixed set of fields — an order reference, amounts, line items, tax, currency, and advertising identifiers. It has no field for a name, an email address, a postal address or a telephone number. Anything else in a request is discarded before anything is stored. You therefore cannot, through ordinary use of the service, send us direct identifiers about your customers even if you try.

That is a design decision rather than a promise about our carefulness, and it is why the rest of this annex is shorter than most.

A3. What we do, and what we will not do

We will:

1. Process only on your instructions, as set out in A1.

2. Never process the data for our own purposes. We do not sell it, do not use one customer's data on behalf of another, and do not use it to train AI or machine-learning models — for that, unlike the commercial data covered by section 6 of the terms, your agreement alone is not enough, because it is your customers' data and not yours to give away. One exception, and it stops being personal data before it is used. We may produce aggregated, anonymised statistics from the data and use them to operate, secure, improve and benchmark the service, as described in section 6 of the terms. An aggregate is produced so that neither you nor any of your customers can be identified in it or reconstructed from it, and no aggregate is built from so few stores that one could be picked out.

3. Keep it confidential. Everyone with access is under a confidentiality obligation.

4. Apply the security measures in A7.

5. Use sub-processors only under A5.

6. Help you with requests from your customers, and with your obligations under Articles 32 to 36, as far as the nature of the processing and the information we hold allow. Because of A2, we usually cannot identify a person from what we hold. Where you can give us an order reference, we will act on that.

7. Tell you without undue delay if we become aware of a personal data breach affecting your data, with whatever information we have at the time and more as it emerges.

8. Delete or return the data when you leave, under A8.

9. Give you the information you need to show you are compliant, and allow audits under A6.

A4. Where the data is

We process your data inside the EU/EEA. Our database and our application both run in Stockholm.

Where a sub-processor in A5 processes data outside the EEA, the transfer relies on the European Commission's adequacy decision for the EU–US Data Privacy Framework where that sub-processor is certified under it, and on Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914, Module Three) where it is not.

A5. Sub-processors

You give general written authorisation for us to use the sub-processors below.

Your own reporting tools are not on this list either. The reporting export is a file at a private URL that your tool fetches. We do not send it anywhere and we have no relationship with whatever you point at it. That tool is your processor, engaged by you, and covered by whatever agreement you have with it — not by this annex.

Polar is not on this list, and it is worth saying why rather than leaving you to notice. Polar handles your subscription billing as merchant of record. It processes your company's billing details as its own controller, not your customers' order data, so it sits under the privacy policy rather than under this annex.

We will give you 30 days' notice before adding or replacing a sub-processor. You may object on reasonable data protection grounds within that period. If we cannot resolve the objection, you may terminate the affected part of the service without penalty, and we will refund any prepaid fees for the unused period.

We impose obligations on each sub-processor that are no less protective than these, and we remain fully liable for what they do.

A6. Audit

We will answer reasonable written questions about our processing and make our then-current security documentation available.

You may audit us no more than once in any twelve-month period, on 30 days' written notice, during business hours, without unreasonable disruption, and subject to confidentiality. The audit can be carried out by you or by an independent auditor you appoint, provided they are not a competitor of ours and they accept the same confidentiality terms you do. Where an audit follows a personal data breach affecting your data, neither the frequency limit nor the notice period applies.

We do not hold SOC 2 or ISO 27001 certification, and nothing here implies that we do. We would rather say so here than have you find out during a procurement review.

A7. How the data is protected

Separation between accounts. Each account's data is separated at the database level, so the separation is applied by the database on every query rather than by application code remembering to filter. It is verified by paired tests — one proving a customer can read their own data, one proving they cannot read anyone else's — because a test that only checks for refusal passes just as happily against a table with no protection at all.

Our own elevated access is limited and enumerable. There is one place in our codebase where the boundary between accounts may be crossed, and each module in it has to state why an ordinary signed-in session cannot do the job. Our support access sits outside that boundary rather than as an exception inside it.

Authentication. Sign-in is by emailed link or Google account. No passwords are stored.

Separate keys. Each store has its own API key, scoped to that store alone, and can be rotated on request with immediate effect. The tag container, the reporting export and the advertising feed use different keys, so rotating one does not disturb the others.

An audit trail. Changes to a store's settings are recorded with the value before and after, the time, and who made the change — including when the change was made by our support.

Data minimisation. The order interface accepts a fixed set of fields and ignores everything else, so data outside the agreed scope is not stored even if it is sent. Advertising and analytics identifiers are erased on a schedule rather than on request.

Network protections. Requests are rate limited per store. When we fetch a URL you have given us, we restrict it to public internet addresses and re-check every redirect, so it cannot be used to reach systems that are not ours to reach.

Encryption. In transit over TLS, and at rest by our database provider.

A8. When you leave

We will delete your data within 90 days of termination, or return it first if you ask within 30 days of termination. You can export your own reporting data at any time while your subscription is active — section 6 of the terms sets out when exports pause.

We may keep data we are legally required to keep, and aggregated figures that identify nobody, for as long as that requirement lasts.

A9. Liability

Liability under this annex is subject to the limits in section 9 of the terms, except where those limits cannot lawfully apply — including liability to a data subject under Article 82.

A10. The details, for your records

Subject matter. Calculating the profit on your orders, and reporting it back to you and to the advertising and reporting destinations you choose.

Duration. For as long as you have an account, plus the deletion period in A8.

Nature and purpose. Receiving order data at the point of purchase; calculating profit per order and per line; storing the result so it can be reported; returning a profit figure to your tag container for use as a conversion value; making reporting data available to the destinations you configure.

Whose data. Your customers — people who have completed a purchase on your website.

What kind of data.

No special category data under Article 9 is processed, and no criminal offence data under Article 10.

Not processed, and not accepted: names, email addresses, postal addresses, telephone numbers, payment card or bank details, your customers' IP addresses, and account credentials. The order interface has no field for any of them.

One qualification about IP addresses. The optional session tag you may install on your own website is a JavaScript file served from our domain. Serving a file means receiving the request for it, so a visitor's IP address and browser version reach our content delivery network in passing, exactly as they reach any provider of a hosted font, image or script. They are not written to any table, not attached to any order, and not used for anything beyond delivering the file. They appear only in the delivery network's own short-lived operational logs. No IP address is accepted or stored through the order interface, which is what the paragraph above is about.

Retention. Online identifiers are erased 90 days after the order by a scheduled job; the order itself remains without them. Transaction data is kept for the life of the account, then handled under A8.

A11. Where a law other than the GDPR applies to you

We are a Swedish company, but you may not be. This section says how the annex reads when the law that covers you is not the one it was written against. It adds obligations on us; it takes none away.

United Kingdom. Where the UK GDPR applies, read references in this annex to the GDPR as references to the UK GDPR and the Data Protection Act 2018, and references to a supervisory authority as including the Information Commissioner's Office. Transfers out of the UK rely on the UK International Data Transfer Addendum to the Standard Contractual Clauses.

Switzerland. Where the Swiss Federal Act on Data Protection applies, read references to the GDPR as references to that Act, and the supervisory authority as the Federal Data Protection and Information Commissioner. Transfers out of Switzerland rely on the Standard Contractual Clauses as amended for Swiss law.

United States. Where a US state privacy law applies to you — California's CCPA and CPRA, or the equivalent laws in Virginia, Colorado, Connecticut, Texas, Oregon, Montana and the other states that have one — you are the business or controller and we are your service provider or processor. Those laws require the following to be written down, so here it is:

• We do not sell your customers' personal information, and we do not share it for cross-context behavioural advertising. There is no arrangement under which we could, and there never has been.

• We do not retain, use or disclose it for anything other than performing this service for you. Not for our own commercial purposes, and not combined with anyone else's data — with the single exception of the aggregated, anonymised statistics described in A3.2, which are deidentified data under those laws. We will not attempt to reidentify them.

• We tell you if we conclude we can no longer meet these obligations, and you may stop and remediate the processing.

• You may check that we are meeting them. A6 is how.

None of this makes us the business or the controller of that information. You are, and A1 already says so.