Simply Restock
Privacy policy
Simply Restock lets you create purchase orders, record what arrives, and keep your inventory counts accurate. This policy describes what the app reads from your Shopify store, what it stores, and how to have it removed.
The short version
- The app reads your Shopify data live, every time a screen needs it. It does not copy your catalogue or inventory into its own database.
- It does not request, access or store your customers' personal data. It holds no shopper names, addresses, emails or contact details.
- If you turn on sales history, it counts how many units of each product sold, per location, per day — and stores those counts only. No orders, no customers, no money.
- It stores the purchase orders and supplier records you create in it, plus the minimum needed to install the app and confirm your subscription.
Shopify data the app reads
The app requests five permissions at install: read_products, write_products,
read_locations, read_inventory and write_inventory. Through them it
reads, at the moment a screen needs it and without retaining a copy:
- Products and variants — title, SKU, barcode, image and unit cost
- Locations
- Inventory quantities at those locations
- Your shop profile — name, currency, timezone, country and Shopify plan
The only data the app writes back to Shopify is inventory quantity: units are added to incoming at the destination location when you mark a purchase order as ordered, and moved into available when you receive them. Every such entry is tagged to the purchase order that caused it, so it is identifiable in your inventory history. The app never writes products, prices, orders or customers.
The app does not request access to customers, checkouts, themes or files.
Sales history — optional, and off unless you turn it on
To tell you how fast a product sells, the app needs to read your past orders. Those permissions
(read_orders, read_all_orders and
read_merchant_managed_fulfillment_orders) are optional: they are not
requested at install, and nothing asks for them unless you turn on sales history in the app's settings.
You can withdraw them in Shopify at any time.
From each order the app reads only: when it was placed, whether it was a test or was cancelled, the quantity of each product variant on it, and which of your locations it was sold or fulfilled from. It reads no customer name, email, address or phone number, and no payment or money field. Nothing about an individual order is stored. What is stored is the total: units of one product variant sold at one location on one day. Those daily counts are kept for two years and then deleted, and they are deleted with everything else if you uninstall.
What the app stores
| Stored | Why |
|---|---|
Your store's myshopify.com domain, Shopify store id, store name, contact email,
currency, timezone, country and Shopify plan |
Identify your store, format money and dates correctly, and reach you for support |
| Shopify access tokens | Call Shopify on your behalf. Encrypted at rest with AES-256-GCM, never sent to a browser and never written to logs |
| Subscription status and billing-cycle end date | Confirm an active subscription without calling Shopify on every page load |
| A record of each Shopify notification received — topic, Shopify's webhook id, a timestamp and a hash of the payload | Process each notification exactly once. The payload itself is not stored. |
| Suppliers you create — name, email and notes | So you can pick a supplier on a purchase order |
| Purchase orders you create — numbers, statuses, quantities, costs, dates, notes, receipts and comments, plus a snapshot of each product's title, SKU and barcode | They are the app's reason to exist. The snapshot is what keeps an old order readable after a product is renamed or deleted in Shopify |
| If sales history is on: units sold per product variant, per location, per day, for up to two years, plus when the last import ran | Work out how fast a product sells, how many days of stock you have left, and what to reorder. Derived counts only — no orders, customers or money are stored, and they are recomputed from Shopify rather than kept in step with it |
| The Shopify staff-account identifier of whoever made each change | Attribute entries in a purchase order's history. Stored only; never displayed and never shared |
What the app never stores
- No customer or shopper personal data of any kind.
- No payment card details. Shopify bills your subscription through Shopify Billing; the app never sees a card.
- No tracking or analytics of your storefront's visitors.
Data deletion requests
We subscribe to Shopify's mandatory privacy webhooks (customers/data_request,
customers/redact, shop/redact) and respond to every request. The app operates on
a live-read model: it does not copy or store Shopify customer data. It stores only the purchase-order
records the merchant creates in the app, which contain no customer-identifiable information. Because we
hold no customer data to return or erase, we acknowledge these requests and retain the
merchant's own purchase-order records, as
Shopify's privacy-law
compliance guidance permits. Merchants can request deletion of their own data at any time via our
support contact.
Uninstalling
When you uninstall, Shopify notifies the app. It revokes its stored access tokens, marks the store uninstalled and cancels any queued background work. Your purchase-order and supplier records are kept, so that reinstalling restores your history rather than starting you over. If you would rather they were erased, email us and we will delete them.
Who else processes this data
- Shopify — the platform the app runs in and reads from, and the processor of your subscription.
- Railway — hosting and the managed PostgreSQL database where the data above is stored.
- Sentry — server-side error diagnostics. Request headers, cookies, bodies, query strings and user context are stripped before an error report leaves the app, so access tokens and session tokens are never included.
The app sends your data to no one else, and sells it to no one.
Security
- All traffic is served over HTTPS.
- Access tokens are encrypted at rest and are never exposed to the browser.
- Every database query is scoped to a single store, enforced in the data layer rather than left to each query.
- Incoming Shopify notifications are verified by HMAC signature and rejected if it does not match.
Changes to this policy
If this policy changes materially, the date below changes with it and the change is described in the app's changelog on the Shopify App Store.
Contact
Questions about this policy, or a request to delete your data: support@sahajlabs.com.