Privacy Policy

Last updated: August 14, 2026

What data we collect

RestockRadar accesses your Shopify store's product catalog, inventory levels, inventory-item unit costs, order history, and location data through the Shopify Admin API. The app also stores supplier settings, product-to-supplier assignments, and purchase-order drafts that you create in RestockRadar.

How we use your data

• Product and variant data: used to identify SKUs and track inventory levels
• Order data: used to compute sales velocity (average daily sales, trends)
• Inventory levels: used to calculate days to stockout and reorder points
• Location data: used to aggregate inventory across multiple warehouses
• Inventory-item unit costs: read from Shopify when an authorized user creates a purchase-order draft, then stored on that draft and displayed during later reviews so its monetary totals remain auditable
• Supplier and purchase-order data: used to group replenishment recommendations, preserve editable draft quantities, and export merchant-requested CSV files
• Received-receipt snapshots: when you confirm a shipment, RestockRadar stores an immutable copy of the reviewed quantities and unit costs so the receipt remains auditable. If CostLedger handoff is enabled for your shop, a signed copy of that snapshot may be delivered to CostLedger for merchant confirmation there. RestockRadar does not change Shopify inventory or native purchase orders.

Data storage

Your data is stored in a secure PostgreSQL database hosted on Railway (US-based infrastructure). We retain inventory snapshots for up to 90 days to compute velocity trends. Order history, supplier settings, product-to-supplier assignments, purchase-order records, and immutable received-receipt snapshots are retained while the app is installed so the service can operate and preserve purchasing history. Pending copies delivered to CostLedger are owned by CostLedger and persist until CostLedger is uninstalled. When you uninstall RestockRadar, records in the RestockRadar application database are automatically deleted. A previously delivered private install notification is stored separately from the application database, is retained only while needed for install monitoring and outreach decisions, and is not automatically recalled by uninstall; contact us to request its deletion.

Data sharing

We do not sell merchant data. We use infrastructure and communications service providers to host the app and deliver features. Alert notifications are sent only to email addresses and Slack webhooks that you configure. When the app is installed, an operational notification containing the shop domain and Shopify plan metadata may be sent to our private operations notification service so we can monitor installs and decide whether support outreach is appropriate.

Customer data

RestockRadar does not access, store, or process customer personal information. We access product and inventory data plus order-level operational data such as product identifiers, quantities, prices, and timestamps, but not customer details.

GDPR compliance

We handle all mandatory Shopify GDPR webhooks: customer data requests, customer data erasure, and shop data erasure. Since we store no customer PII, customer data requests return empty results.

Contact

For privacy questions, contact us at [email protected].