Privacy Policy — Stocklume Back in Stock

About this policy

Stocklume Back in Stock ("the app") is a Shopify app provided by Stocklume ("we", "us"). Merchants install it in their Shopify store so that shoppers can ask to be emailed when an out-of-stock product becomes available again. This policy explains what information the app handles, why, who it is shared with, how long it is kept, and how to exercise privacy rights.

For shoppers' personal information, the merchant who runs the store decides how it is used; we process it on the merchant's behalf to provide the app. The merchant's own privacy policy also applies.

1. Information we handle

Shoppers (people who use the "Notify me" form on a store)

• Email address entered into the "Notify me" form, stored in normalized form (trimmed, lower-case).
• What was requested: the store, product and variant (Shopify product, variant and inventory item identifiers, product title and handle).
• Subscription status and dates: when the request was made, and whether and when the back-in-stock email was sent.
• Notification records: whether a notification email was reserved, sent or not sent, with timestamps, used for delivery reliability and for counting the emails a store sends each month.

We do not collect shoppers' names, postal addresses, phone numbers, payment details or order history, and we do not read other data from the store's Shopify customer records. Shoppers can use the form without a customer account.

To limit abuse of the form, the request's IP address and the submitted email address are used briefly in server memory for rate limiting; the app does not write the IP address to its database or to its logs. Our hosting provider may record technical request information, such as IP addresses, in its request logs.

Merchants (stores that install the app)

• Store identity: the store's myshopify.com domain and the app's installation status for the store.
• Shopify access credentials issued by Shopify when the app is installed (access tokens and related session data), used only to call Shopify's APIs for that store.
• Catalog and inventory data needed for the app to work: product and variant identifiers and titles, inventory item and location identifiers, and inventory quantities.
• Plan and usage data: the app's Shopify billing plan and the number of notification emails sent in the current calendar month (UTC).

Technical and operational data

• Webhook delivery records (Shopify webhook identifiers, topic, time received), kept for a short period to avoid processing the same event twice.
• Processing records for restock checks (status, retry counts, error messages).
• Records of privacy requests received from Shopify, so they can be fulfilled.
• Application logs (timestamps, store domain, internal identifiers, outcome of operations and errors). Our logging is designed not to contain shoppers' email addresses or full webhook payloads, and email addresses are removed from log lines and stored error messages.
• Access records: a log of operations that involve shoppers' email addresses (time, store, type of operation, where it came from, an internal reference, outcome and error code). These records do not contain email addresses or other shopper details.

2. Why we use it

• To record back-in-stock requests and send the requested transactional notification email when a product is available again. We do not send marketing emails.
• To return the email addresses collected by the form to the merchant in their own Shopify admin: after a request is recorded, the email address is added to the store's Shopify customer list, reusing an existing customer with the same email address. Only the email address is sent. The app does not set or change email marketing consent (a back-in-stock request is not a marketing subscription) and does not change any other customer details.
• To operate the app for the merchant: checking inventory with Shopify, showing the merchant an overview of requests (shopper email addresses are shown masked in the app's admin page), and applying plan limits and billing.
• To keep the app secure and reliable: preventing abuse, verifying that requests really come from Shopify, retrying failed work, and debugging.
• To respond to privacy requests and meet legal obligations.

3. Who we share it with

• Shopify, the platform the app runs on. Shopify provides store, product and inventory data to the app and handles app installation and billing. The shopper's email address is also stored in the merchant's own Shopify store as a customer record, as described above. Shopify's own privacy policy applies to Shopify.
• Render, our hosting provider. The app and its database (Render Postgres) run on Render in its Frankfurt, Germany (EU Central) region.
• Resend, our email delivery provider. To send a notification we give Resend the shopper's email address and the email content (product name and link).
• Authorities or others where required by law, or to protect the rights and security of users and the service.

We do not sell personal information, and we do not share it for advertising.

4. How long we keep it

• A back-in-stock request, including the shopper's email address, is deleted automatically 90 days after the notification email was sent. A request that is still waiting after 365 days expires and is deleted. It is deleted earlier when Shopify sends us a customer data erasure request for the store, and in any case when the store's data is erased after uninstall.
• Records of finished restock checks are deleted after 90 days. Notification records (which do not contain the email address) are deleted once their billing month started more than 13 months ago.
• After a shopper's data is erased, we may keep a record that a notification email was sent in a given month, with no link to the shopper, only to keep the store's monthly email count accurate.
• The customer record in the merchant's Shopify store is part of the merchant's store data. It is kept and deleted by the merchant and Shopify under their own policies and privacy processes, not by the app; erasing the app's own data does not delete it.
• When a merchant uninstalls the app we stop processing for the store and delete its Shopify access credentials. Shopify then sends a store data erasure request (normally about 48 hours after uninstall) and we delete the remaining data we hold for that store, except minimal lifecycle and webhook receipt records needed to prevent delayed or repeated deletion requests from affecting a later installation. These records contain store and delivery identifiers, timestamps, an irreversible body digest and processing outcomes; they contain no email addresses, access tokens or request bodies.
• Webhook delivery records are deleted automatically after about 48 hours.
• Records of privacy access requests keep the shopper's email address only until the request has been fulfilled; the remaining record without the email address is deleted after 24 months.
• Access records (which contain no email addresses) are deleted after 365 days.
• Render application logs are currently retained for up to 7 days on our Hobby workspace, and then deleted.
• Render Postgres continuous point-in-time recovery (PITR) currently covers up to 3 days on our Hobby workspace. Deleted data can remain in this recovery window until it expires.
• Manually generated logical database backup exports may be retained by Render for up to 7 days.
• According to Resend, it retains email and log data for 30 days by default and backups for 7 days.

5. Privacy rights and requests

Shoppers who want to access or delete their information should contact the store where they made the request. Shopify forwards such requests to us, and we act on them:

• Access: we provide the store owner with the information we hold about that email address for their store.
• Deletion: we delete the shopper's requests for that store and unlink or delete related notification records.

You can also contact us at support@alexshops.dev. Because the app has no shopper accounts, we may need to verify requests through the store concerned. Depending on where you live you may have further rights (for example to correct information or to object to processing), and you may be able to complain to your local data protection authority.

6. Security

We use reasonable technical and organizational measures to protect the information we handle, including encrypted connections (HTTPS) between shoppers, Shopify, the app and our providers, requiring encrypted (TLS) connections between the app and its database, verification of Shopify's request signatures, limiting access to production systems, keeping shoppers' email addresses out of application logs, recording access to shoppers' email addresses without storing the addresses in those records, and never using production data for development or testing. Render states that its managed databases, including backups, are encrypted at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. International processing

The app and its database are hosted by Render in Germany (EU). Resend, our email provider, stores its customer data, including email addresses and delivery logs, in the United States, so shoppers' email addresses are transferred to the United States when a notification is sent. Shopify processes store data under its own policies. Please refer to these providers' privacy documentation for the safeguards they offer.

8. Children

The app is not directed at children, and we do not knowingly collect information from children.

9. Changes

We may update this policy. The effective date above shows when it last changed.

10. Contact

Stocklume, support@alexshops.dev