Privacy Policy

What we read from your store

At install the app requests five read-only scopes: read_products, read_inventory, read_orders, read_all_orders and read_locations. With these alone the app cannot change anything in your store.

read_all_orders is what lets the forecast start from your real sales history instead of the last 60 days. It was reviewed and granted by Shopify. It widens how far back we can look, not what we look at: the three order fields listed below are the only ones we ever read, on old orders exactly as on new ones.

Two further scopes, write_inventory and write_products, are optional. They are never granted at install. The app asks for them only when you choose to let receiving or a stock count write the corrected quantity back into Shopify, and only that quantity is written. If you do not grant them, every other feature still works and your store stays untouched. You can review what is granted under Settings in the app.

From orders, we read only three fields:

• the product variant that was sold,
• the quantity sold, and
• the date the order was processed.

What we do not read

We do not request, receive, or store any customer-identifying data. Our API queries do not include customer name, email address, phone number, shipping or billing address, IP address, or customer ID. These fields are absent from the queries themselves, not merely discarded after retrieval.

As a result, when Shopify sends us a customers/data_request or customers/redact notification, there is no customer data on our side to return or delete.

What we store, and why

At install we read up to a year of order history and reduce it to daily quantity sold per variant. From then on we keep our own record, because Shopify does not hand back everything a forecast needs: a daily snapshot of stock levels, product and variant names, and your store settings (lead time, target stock days, service level). We keep the daily totals rather than the orders themselves.

We also store your Shopify access token so the app can refresh your numbers once a day. It is encrypted at rest with AES-256-GCM; the encryption key is held outside the database.

How long we keep it

Store data is retained while the app is installed. When you uninstall, your access token is deleted immediately and the store is deactivated. Shopify then sends a shop/redact request (normally 48 hours later), at which point all remaining data for your store is permanently deleted.

Security

• All data is transmitted over HTTPS/TLS.
• Data is stored in an EU-region PostgreSQL database with encryption at rest.
• Access tokens are additionally encrypted by the app itself (AES-256-GCM), so a database copy alone does not expose them.
• The app holds read-only permissions unless you grant the optional write scopes; without them it cannot modify your store, and even with them it writes only inventory quantities.

Sharing

We do not sell data and we do not share it with third parties for advertising or any other purpose. Data is processed only by the infrastructure providers that run the app (hosting and database).

Contact

Questions about this policy or a request regarding your data: m.resat.yardimci04@gmail.com