What data we access:

When you install StockSnap, it accesses the following from your Shopify store through the Shopify Admin API:

• Products & variants - titles, SKUs, images, and variant details (to display items during a stock take, receiving scan, or transfer).

• Inventory levels & locations - on-hand quantities per location (to compare against scanned counts, write the inventory adjustments you confirm, and move stock between locations via transfers).

• Collections - titles, to let you scope a stock take to a specific collection.

• Store & session - your store domain and a Shopify access token, used to authenticate the app. If a staff member logs into the app's admin settings screen, we also receive their name, email, and locale as part of Shopify's standard login session - this is Shopify staff account info, not your customers' data.

We do not access your customers' names, emails, addresses, payment details, or order history. This app has no order-related permissions at all.

How we use it:

Data is used solely to provide the app's features: displaying items to scan, comparing counted quantities against Shopify's records, writing inventory adjustments back to Shopify when you confirm them on POS, and creating/shipping inventory transfers between your store's locations. We do not sell, rent, or share your data, and we do not use it for advertising.

What we store:

Stock take, receiving, and transfer records (item counts, previous/new quantities, staff name entered for the session, location(s), and collection) are stored as metaobjects directly on your own Shopify store - not in a separate database we control. The same is true of your app settings (staff roster, default preferences, enabled collections), which are stored as Shopify metafields on your store.

Our own database, hosted on Fly.io, stores only what's needed to authenticate the app with your store: your shop domain and access token, plus (if you log into the admin settings screen) the standard Shopify session record for the staff member logged in, including their name, email, and locale.

Billing:

If you subscribe to a paid plan, your subscription and payment details are handled entirely by Shopify's own billing system - we never see or store your payment information.

Hosting & subprocessors:

The app and its database are hosted on Fly.io. Data is processed only to operate the service.

Data retention & deletion:

Stock take, receiving, and transfer records are automatically pruned after 3 months. Session/authentication data is kept while the app is installed and deleted when you uninstall it. We honor Shopify's mandatory data-request and data-erasure webhooks (customers/data_request, customers/redact, shop/redact).

Your rights:

You can request access to, correction of, or deletion of your store's data at any time by emailing us. We comply with applicable privacy laws including GDPR and CCPA for the limited data we process.

Changes:

We may update this policy as the app evolves. Material changes will be reflected here with a new "last updated" date.

Contact:

Questions or requests: cameron@visionaryart-tech.com