1. Introduction
ClearStock ("we," "our," or "us") operates the ClearStock application (the "App") available on the Shopify App Store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you install and use our App.
We are committed to protecting the privacy of Shopify merchants ("you" or "Merchant") and their customers. Please read this Privacy Policy carefully. By installing and using ClearStock, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information Collected from Shopify
When you install ClearStock, we access the following data from your Shopify store through the Shopify API:
Store Information:
- Shop domain (e.g., yourstore.myshopify.com)
- Shop name and contact email
- Store currency and timezone
Product Information:
- Product titles, descriptions, and handles
- Product types, vendors, and tags
- Variant details (SKU, price, compare-at price)
- Inventory quantities across locations
- Product images (URLs only)
Order Information:
- Order line items (product/variant IDs, quantities sold)
- Order creation dates
- Order totals (for velocity calculations)
Note: We access order data solely to calculate product sales velocity. We do NOT store or access:
- Customer names, emails, or personal information
- Shipping or billing addresses
- Payment information or credit card details
- Customer phone numbers
2.2 Information You Provide Directly
- Account preferences and settings
- Auto-discount rules and configurations
- Exclusion lists (collection IDs, product tags, product IDs)
- Email address for notifications (optional)
- Feedback, support requests, and communications
- NPS survey responses (optional)
2.3 Automatically Collected Information
- App usage data (pages visited, features used)
- Browser type and version
- Device information
- IP address (for security purposes)
- Timestamps of app interactions
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Core App Functionality
- Inventory Analysis: Calculate stock runway (days until sellout) and sales velocity for each product
- Status Classification: Identify Dead, Stuck, Slowing, and Moving inventory based on your configured thresholds
- Auto-Discount Application: Automatically apply discounts to slow-moving products based on your rules
- Price Management: Update product prices and compare-at prices in your Shopify store
- Reporting: Generate aging reports and dashboard analytics
3.2 Service Improvement
- Monitor app performance and fix bugs
- Develop new features based on usage patterns
- Respond to your support requests
- Send email notifications you've opted into (run summaries, weekly digests, alerts)
3.3 Legal Compliance
- Comply with applicable laws and regulations
- Respond to legal requests and prevent fraud
- Enforce our Terms of Service
4. Data Sharing and Disclosure
4.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information or your customers' data to third parties for marketing purposes.
4.2 Service Providers
We may share data with trusted third-party service providers who assist us in operating the App:
Provider | Purpose | Data Shared |
|---|---|---|
Fly.io | Application hosting | App data, encrypted at rest |
Resend | Email delivery | Notification email addresses |
Shopify | Platform integration | Via Shopify API (governed by Shopify's privacy policy) |
All service providers are contractually obligated to protect your data and use it only for the services they provide to us.
4.3 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to:
- Protect our rights, privacy, safety, or property
- Protect the rights, privacy, safety, or property of you or others
- Comply with a judicial proceeding, court order, or legal process
4.4 Business Transfers
If ClearStock is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice in the App of any change in ownership or uses of your information.
5. Data Retention
5.1 Active Accounts
We retain your data for as long as your App remains installed and your account is active. This includes:
- Shop settings and preferences
- Auto-discount rules
- Applied discount history (for audit and revert functionality)
- Run history (last 90 days of auto-discount runs)
- Runway snapshots (for trend analysis)
5.2 After Uninstallation
When you uninstall ClearStock:
- We receive the app/uninstalled webhook from Shopify
- Your session tokens are immediately invalidated
- Your shop settings, rules, and historical data are marked for deletion
- All data is permanently deleted within 30 days of uninstallation
5.3 Backup Data
Backup copies may be retained for up to 90 days after deletion for disaster recovery purposes, after which they are permanently destroyed.
6. Data Security
We implement industry-standard security measures to protect your information:
6.1 Technical Safeguards
- Encryption in Transit: All data transmitted between your browser, our servers, and Shopify uses TLS 1.2+ encryption
- Encryption at Rest: Database storage is encrypted using AES-256 encryption
- Access Controls: Role-based access controls limit employee access to data
- API Security: OAuth 2.0 authentication with Shopify; access tokens stored securely
6.2 Organizational Safeguards
- Regular security assessments and code reviews
- Employee training on data protection
- Incident response procedures
- Limited data access on a need-to-know basis
6.3 Infrastructure
- Hosted on Fly.io with SOC 2 compliance
- Regular automated backups
- DDoS protection and firewall rules
7. Your Rights and Choices
7.1 Access and Portability
You have the right to:
- Access the personal data we hold about you
- Request a copy of your data in a portable format (CSV export available on Starter plan and above)
- View all data through the App's dashboard and reports
7.2 Correction
You can update your shop settings, rules, and preferences at any time through the App interface.
7.3 Deletion
You can request deletion of your data by:
- Uninstalling the App (triggers automatic deletion within 30 days)
7.4 Opt-Out of Communications
You can disable email notifications at any time in Settings → Notifications. Transactional emails related to your account may still be sent.
7.5 GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have additional rights under GDPR:
- Right to Erasure: Request deletion of your personal data
- Right to Restriction: Request restriction of processing
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
- Right to Lodge a Complaint: File a complaint with a supervisory authority
7.6 CCPA Rights (California Users)
If you are a California resident, you have rights under CCPA:
- Right to Know: Request disclosure of data collected
- Right to Delete: Request deletion of personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
We do not sell personal information as defined by CCPA.
8. Customer Data (Your Customers)
8.1 Limited Access
ClearStock accesses minimal customer-related data. We only access:
- Order line items: Product IDs, variant IDs, and quantities purchased
- Order dates: To calculate sales velocity over time
We do NOT access, store, or process:
- Customer names or contact information
- Customer email addresses or phone numbers
- Shipping or billing addresses
- Payment or financial information
- Any other personally identifiable customer information
8.2 Data Processing Role
For the limited order data we access, you (the Merchant) remain the Data Controller. We act as a Data Processor, processing data only on your behalf and according to your instructions (your configured rules and settings).
8.3 Customer Data Requests
If your customer requests access to or deletion of their data:
- ClearStock does not store identifiable customer data
- Order data is aggregated and cannot be linked to individual customers
8.4 GDPR Compliance for Customer Data
We comply with Shopify's mandatory GDPR webhooks:
- customers/data_request - We respond confirming no identifiable customer data is stored
- customers/redact - We acknowledge and confirm no customer PII to delete
- shop/redact - We delete all shop data upon receiving this webhook
9. Cookies and Tracking
9.1 Essential Cookies
ClearStock uses essential cookies required for the App to function:
- Session cookies for authentication
- CSRF protection tokens
- User preference cookies
9.2 No Third-Party Tracking
We do NOT use:
- Third-party analytics cookies
- Advertising or retargeting cookies
- Social media tracking pixels
10. Children's Privacy
ClearStock is a business-to-business application designed for Shopify merchants. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If we learn that we have collected personal information from a child, we will delete it immediately.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs) for EU data transfers
- Compliance with applicable data protection laws
- Data processing agreements with all sub-processors
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy in the App
- Updating the "Last Updated" date at the top
- Sending an email notification for significant changes
Your continued use of ClearStock after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@clearstock.app
Support: support@clearstock.app
Data Protection Inquiries:
For GDPR or data protection related requests, please email privacy@clearstock.app with the subject line "Data Protection Request."
Response Time: We aim to respond to all inquiries within 72 hours.
14. Shopify's Role
ClearStock is built on the Shopify platform. Shopify may independently collect and process data as described in Shopify's Privacy Policy. Our access to your Shopify data is governed by the permissions you grant during installation and Shopify's API Terms of Service.
By installing and using ClearStock, you acknowledge that you have read and understood this Privacy Policy.