StockSaviour Privacy Policy
StockSaviour is operated under the StockSaviour business name in Japan. This policy explains what information the app processes, why it is needed, how long it is retained, and how to contact us.
Information processed from Shopify
StockSaviour processes only the information needed to provide its store-management features:
- shop identity, currency, and Shopify store timezone;
- product and variant titles, SKUs, Shopify Vendor, creation time, inventory tracking and quantity, and current unit cost;
- order and line-item amounts and quantities, discounts, cancellations, sales agreements, refunds, refund line items, and restock status; and
- the app permissions granted by the merchant.
The app does not request customer names, email addresses, phone numbers, physical addresses, payment details, or marketing profiles. Shopify nevertheless classifies Order and Refund resources as protected customer data.
Information provided by merchants
Merchants can save inventory settings, monthly goals, order-message templates, and bounded report snapshots. Supplier names, order quantities, and additional instructions are entered to generate an order message in the merchant's browser. They are not stored by StockSaviour. Support correspondence is processed only when a merchant contacts the dedicated support email address.
How information is used
Information is used only to:
- authenticate the installed Shopify store;
- calculate inventory risk, reorder suggestions, sales, refunds, estimated gross profit, trends, reports, and goal progress;
- verify access to the paid app;
- secure, operate, troubleshoot, and maintain the service; and
- answer merchant support requests.
StockSaviour does not sell personal information, use Shopify data for advertising, contact a merchant's customers, or make decisions about customers.
Storage and retention
- Product, inventory, order, and refund data is processed for the current calculation and is not stored as raw Shopify records in the StockSaviour database.
- Encrypted Shopify sessions, merchant settings, templates, and bounded aggregate reports are retained while the app is installed.
- To reject duplicate or conflicting webhook deliveries, StockSaviour stores the shop domain, webhook topic and delivery identifier, a cryptographic digest of the signed payload, a fixed outcome code, attempt count, and timestamps. The webhook payload itself is not stored. These receipts are deleted by Shopify's authenticated shop-deletion webhook or by an automatic fallback cleanup after they have not been seen for 30 days. The daily cleanup means expiry normally completes within 31 days of the last delivery.
- Authenticated uninstall and Shopify deletion webhooks delete the merchant's primary database records. Render's current recovery data can remain for up to three days, application logs for up to seven days, and an operator-requested logical database export for up to seven days.
- Support correspondence is normally deleted within 24 months after the last support interaction, unless a longer period is required for security, dispute resolution, or legal compliance.
Service providers and international processing
Shopify provides the commerce platform and app authentication. Render hosts the application and PostgreSQL database in Singapore. Google provides the dedicated Gmail support mailbox. These providers can process limited information in countries other than the merchant's country under their respective data-protection terms.
Security
Connections use HTTPS or private-network transport. Shopify access and refresh tokens are encrypted at rest using AES-256-GCM. Database access is restricted, tenant-owned records are scoped to the authenticated Shopify shop, and application logs are designed to exclude credentials and Shopify payloads. No system can be guaranteed completely secure, but StockSaviour uses reasonable technical and operational safeguards appropriate to the information it processes.
Merchant and customer requests
Shopify merchants can request access, correction, deletion, or other assistance concerning information controlled by StockSaviour by contacting the address below. Requests concerning a merchant's customers should normally be initiated through that merchant. We may ask for information needed to verify the requester's authority before acting.
Changes to this policy
This policy will be updated before a material change to the data used, purpose of processing, service providers, or retention periods takes effect. The effective date at the top identifies the current version.
Contact
StockSaviour
Japan
Email: stocksaviour.support@gmail.com