Simply Restock
Privacy policy
Simply Restock lets you create purchase orders, record what arrives, and keep your inventory counts accurate. This policy describes what the app reads from your Shopify store, what it stores, and how to have it removed.
The short version
- The app reads your Shopify data live, every time a screen needs it. It does not copy your catalogue, inventory or orders into its own database.
- It does not request, access or store your customers' personal data. It holds no shopper names, addresses, emails or order history.
- It stores the purchase orders and supplier records you create in it, plus the minimum needed to install the app and confirm your subscription.
Shopify data the app reads
The app requests four permissions: read_products, read_locations,
read_inventory and write_inventory. Through them it reads, at the moment a
screen needs it and without retaining a copy:
- Products and variants — title, SKU, barcode, image and unit cost
- Locations
- Inventory quantities at those locations
- Your shop profile — name, currency, timezone, country and Shopify plan
The only data the app writes back to Shopify is inventory quantity: units are added to incoming at the destination location when you mark a purchase order as ordered, and moved into available when you receive them. Every such entry is tagged to the purchase order that caused it, so it is identifiable in your inventory history. The app never writes products, prices, orders or customers.
The app does not request access to customers, orders, checkouts, fulfillments, themes or files.
What the app stores
| Stored | Why |
|---|---|
Your store's myshopify.com domain, Shopify store id, store name, contact email,
currency, timezone, country and Shopify plan |
Identify your store, format money and dates correctly, and reach you for support |
| Shopify access tokens | Call Shopify on your behalf. Encrypted at rest with AES-256-GCM, never sent to a browser and never written to logs |
| Subscription status and billing-cycle end date | Confirm an active subscription without calling Shopify on every page load |
| A record of each Shopify notification received — topic, Shopify's webhook id, a timestamp and a hash of the payload | Process each notification exactly once. The payload itself is not stored. |
| Suppliers you create — name, email and notes | So you can pick a supplier on a purchase order |
| Purchase orders you create — numbers, statuses, quantities, costs, dates, notes, receipts and comments, plus a snapshot of each product's title, SKU and barcode | They are the app's reason to exist. The snapshot is what keeps an old order readable after a product is renamed or deleted in Shopify |
| The Shopify staff-account identifier of whoever made each change | Attribute entries in a purchase order's history. Stored only; never displayed and never shared |
What the app never stores
- No customer or shopper personal data of any kind.
- No payment card details. Shopify bills your subscription through Shopify Billing; the app never sees a card.
- No tracking or analytics of your storefront's visitors.
Data deletion requests
We subscribe to Shopify's mandatory privacy webhooks (customers/data_request,
customers/redact, shop/redact) and respond to every request. The app operates on
a live-read model: it does not copy or store Shopify customer data. It stores only the purchase-order
records the merchant creates in the app, which contain no customer-identifiable information. Because we
hold no customer data to return or erase, we acknowledge these requests and retain the
merchant's own purchase-order records, as
Shopify's privacy-law
compliance guidance permits. Merchants can request deletion of their own data at any time via our
support contact.
Uninstalling
When you uninstall, Shopify notifies the app. It revokes its stored access tokens, marks the store uninstalled and cancels any queued background work. Your purchase-order and supplier records are kept, so that reinstalling restores your history rather than starting you over. If you would rather they were erased, email us and we will delete them.
Who else processes this data
- Shopify — the platform the app runs in and reads from, and the processor of your subscription.
- Railway — hosting and the managed PostgreSQL database where the data above is stored.
- Sentry — server-side error diagnostics. Request headers, cookies, bodies, query strings and user context are stripped before an error report leaves the app, so access tokens and session tokens are never included.
The app sends your data to no one else, and sells it to no one.
Security
- All traffic is served over HTTPS.
- Access tokens are encrypted at rest and are never exposed to the browser.
- Every database query is scoped to a single store, enforced in the data layer rather than left to each query.
- Incoming Shopify notifications are verified by HMAC signature and rejected if it does not match.
Changes to this policy
If this policy changes materially, the date below changes with it and the change is described in the app's changelog on the Shopify App Store.
Contact
Questions about this policy, or a request to delete your data: support@sahajlabs.com.