Privacy Policy

dbStock is a Shopify app that reads your store's sales and inventory history to tell you exactly what to reorder and how much. This policy covers both the embedded app installed on your Shopify store and the marketing website at dbstock.app.

For the store data Shopify shares with us, we act as a data processor on your behalf. For the details you give us directly — such as a waitlist email — we act as the data controller.

With the permissions you approve when you install, dbStock reads the following through the Shopify Admin API:

• —Your products and their variants.
• —Your order history, up to the last 12 months, to reconstruct demand.
• —Your current inventory levels and store locations.

The only write permission we ask for (write_inventory) is used for one thing: increasing a product's stock when you mark a purchase order as received. We never write anything else to your store.

We hold the minimum needed to compute your reorders. For each sale, that is only three things: which product variant sold, how many, and on what date. Alongside that we store the settings and context you create in the app:

• —Your reorder settings (lead time, service level, review period).
• —Your suppliers (name, email, unit cost, lead time, minimum order).
• —The purchase orders you create in the app.
• —A Shopify access token, so the app can talk to your store.

What we never store: your customers' names, emails, addresses, phone numbers, payment or card details, or any other personal information about your shoppers. None of it is needed to work out what to reorder, so we do not collect it. Less data on our side means less to worry about on yours.

If you reserve a founding spot on dbstock.app, we store the email address you enter — and, if you add it, your store URL — so we can contact you about early access. You can ask us to delete it at any time.

The website uses privacy-friendly analytics (Plausible) and, where enabled, Google Analytics, to understand aggregate traffic. These measure visits in aggregate and are not used to identify you personally on our side.

Store data is used for one purpose only: to generate your reorder recommendations, demand forecasts, money-at-stake figures, and purchase orders. When you choose to email a purchase order to a supplier, the PO contents and the supplier email address you entered are sent through our email provider so we can deliver that message.

We do not sell or rent your data, and we do not use it to train models offered to anyone else.

We keep the list of third parties deliberately short:

• —Hosting — our servers run in the European Union (Hetzner, Germany).
• —Email delivery — purchase-order emails are sent via Resend (delivered through AWS SES, EU / Ireland region). Only the purchase order you send and the supplier address you enter pass through it.

We use no other third parties to process your store data.

Your data is stored on servers in the European Union. We keep it for as long as the app is installed on your store. When you uninstall the app, or on a verified deletion request, we delete your store's data.

Shopify's mandatory privacy webhooks — customer data request, customer redact, and shop redact — are handled automatically. Because we do not store your customers' personal data, a customer data request routed through Shopify returns no personal data from us.

Access tokens and data are held on access-controlled servers, and all traffic is encrypted in transit over HTTPS/TLS. We follow the principle of least data: the less we hold, the less there is to protect.

You can ask for a copy of the data we hold about you, ask us to correct or delete it, or ask any question, at any time — just email support@dbstock.app. Merchants in the EU, UK and other regions have rights under GDPR and comparable laws, including access, correction, deletion and portability, and we honour them.

Inside the app we use only the session cookies Shopify requires to keep you signed in within your admin. The website uses minimal cookies for analytics where enabled. We set no advertising or cross-site tracking cookies.

If we change this policy, we will update the date at the top. For material changes, we will also notify merchants in the app or by email.

Questions or requests about your data: support@dbstock.app. We reply within one business day, and usually much faster.