Privacy Policy

Last updated: September 27, 2026

What data we collect

RestockRadar accesses your Shopify store's product catalog, inventory levels, inventory-item unit costs, order history, and location data through the Shopify Admin API. The app also stores supplier settings, product-to-supplier assignments, and purchase-order records that you create in RestockRadar.

For purchase-order documents, we store the business details that the store owner reviews and saves, whether entered manually or imported from Shopify. These may include a business name, public contact email, website, phone number, business address, a separate delivery name and address, optional business or tax registration text, and an optional manually selected accent colour. We also store a copy of the buyer details and colour used when an order is issued, along with its issue date and the timezone used to display that date.

When Purchasing opens, we refresh a saved cache containing only the store name, public contact email, and website from Shopify. Shopify address and phone details are fetched only when the owner opens or refreshes the business-details form. These are temporary suggestions and are never written to the public cache. They are stored in the profile and used in documents only after the owner reviews and saves them. Closing or cancelling the form does not save its suggestions or other unsaved changes.

How we use your data

• Product and variant data: used to identify SKUs and track inventory levels
• Order data: used to compute sales velocity (average daily sales, trends)
• Inventory levels: used to calculate days to stockout and reorder points
• Location data: used to aggregate inventory across multiple warehouses
• Inventory-item unit costs: read from Shopify when an authorized user creates a purchase-order draft, then stored on that draft and displayed during later reviews so its monetary totals remain auditable
• Supplier and purchase-order data: used to group replenishment recommendations, preserve editable draft quantities, and generate merchant-requested CSV files and printable documents that can be saved as PDFs
• Business details: used to identify your business and any delivery address on supplier documents. Saved owner-reviewed details take priority; only the store name, public contact email, and website may fall back to cached Shopify values. If no business name is available, we use the store domain. Shopify address and phone details are included only after the owner reviews and saves those fields.
• Issued-order snapshots: when you choose Issue order, we save the buyer details, optional manual colour, issue date, and display timezone for that order. Later profile edits or Shopify changes do not replace these saved details, so reprinted or downloaded copies preserve the buyer identity used at issuance. These snapshots are separate from the received-receipt snapshots described below.
• Received-receipt snapshots: when you confirm a shipment, RestockRadar stores an immutable copy of the reviewed quantities and unit costs so the receipt remains auditable. If CostLedger handoff is enabled for your shop, a signed copy of that snapshot may be delivered to CostLedger for merchant confirmation there. RestockRadar does not change Shopify inventory or native purchase orders.

Data storage

Your data is stored in a secure PostgreSQL database hosted on Railway (US-based infrastructure). We retain inventory snapshots for up to 90 days to compute velocity trends. Order history, supplier settings, product-to-supplier assignments, purchase-order records, saved business profiles, the public Shopify business-details cache, issued-order snapshots and issue dates, and immutable received-receipt snapshots are retained while the app is installed so the service can operate and preserve purchasing history. Updating a business profile does not erase the details already saved on issued orders.

When we process Shopify's app-uninstall or shop-data-erasure notification, records for that shop in the RestockRadar application database, including its saved business profile, public cache, and issued-order snapshots, are automatically deleted. Copies you have printed, downloaded, or shared with suppliers are outside that database and are not recalled. Pending receipt copies delivered to CostLedger are owned by CostLedger and persist until CostLedger is uninstalled. A previously delivered private install notification is stored separately from the application database, is retained only while needed for install monitoring and outreach decisions, and is not automatically recalled by uninstall; contact us to request its deletion.

Data sharing

Purchase-order CSV files and print/PDF documents are generated for you to download, print, and share with your supplier. Issue order records the order as sent and prepares your chosen output; it does not email the supplier. The separate CostLedger handoff applies to received-receipt snapshots, as described above.

We do not sell merchant data. We use infrastructure and communications service providers to host the app and deliver features. Alert notifications are sent only to email addresses and Slack webhooks that you configure. When the app is installed, an operational notification containing the shop domain and Shopify plan metadata may be sent to our private operations notification service so we can monitor installs and decide whether support outreach is appropriate.

Customer data

RestockRadar does not access, store, or process shoppers' personal information from Shopify customer records. We access product and inventory data plus order-level operational data such as product identifiers, quantities, prices, and timestamps, but not customer details. The business contact and delivery details that you save for purchase-order documents are merchant-supplied business information and are separate from shoppers' customer records.

GDPR compliance

We handle all mandatory Shopify GDPR webhooks: customer data requests, customer data erasure, and shop data erasure. Since we do not store shoppers' personal information from Shopify customer records, customer data requests return empty results. Merchant business contact details are handled as described in this policy.

Contact

For privacy questions, contact us at [email protected].