StockOps Privacy Policy

Last updated: July 20, 2026

StockOps (“we”, “us”, or “our”) provides an inventory management application that embeds in Shopify Admin (“the App”). This policy explains what data we collect, how we use it, and your rights.

1. Who we are

StockOps (“we”, “us”, or “our”) is the operator of this App. Contact: stockopssupport@gmail.com

2. Data we collect

When a merchant installs the App, we may process:

• Shop identifiers — Shopify shop domain and Shopify shop ID
• Authentication — offline access tokens (encrypted at rest)
• Catalog & inventory — products, variants, SKUs, locations, inventory quantities
• Operations data — suppliers, purchase orders, transfers, stock takes, adjustments, and related notes you enter
• Sales aggregates — units sold per variant per day (derived from paid orders for velocity / reorder math). We do not store customer names, emails, addresses, or phone numbers.
• Billing status — subscription status via Shopify Billing (we do not store card numbers)

3. How we use data

• Provide reorder suggestions, purchase orders, receiving, and inventory workflows
• Keep local inventory in sync with Shopify via Admin API and webhooks
• Enforce subscription access and improve reliability (logs without secrets)

We do not sell personal data. We do not use customer personal data for advertising.

4. Legal bases / Shopify requirements

We process merchant store data as a service provider / processor to deliver the App the merchant installs. Merchants remain the controller of their store data. We respond to Shopify’s mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact).

5. Data sharing

We share data only with infrastructure providers needed to run the App (e.g. hosting and database), and with Shopify as required to operate an embedded app. Current subprocessors: Fly.io (application hosting) and Fly.io Managed Postgres (database).

6. Retention & deletion

• On uninstall, we delete the shop’s app data (including encrypted tokens) as soon as practical.
• Shopify also sends shop/redact ~48 hours after uninstall; we purge any remaining shop data.
• Customer data requests / redactions: we hold no customer PII; requests are acknowledged and logged.

7. Security

Access tokens are encrypted at rest. Connections use HTTPS. Access to production systems is limited to authorized operators.

8. Your rights

Merchants may request access or deletion by uninstalling the App or emailing stockopssupport@gmail.com. Customers should contact the merchant; we assist merchants via Shopify compliance webhooks.

9. Changes

We may update this policy; the “Last updated” date will change when we do.

10. Contact

stockopssupport@gmail.com