Stockme Privacy Policy

Stockme ("we", "us") is operated by GentleTap. This policy describes how we handle data when you install and use our Shopify app hosted at stockme.gentletap.co.

Data we collect

• Shop domain, staff email (if provided in settings), and OAuth access tokens
• Product, variant, inventory, location, and cost data synced from Shopify
• Purchase orders, suppliers, stocktakes, and transfers you create in the app
• Billing status via Shopify's billing API (we do not store payment card data)

Data we do not collect

We do not store Shopify customer names, emails, or order PII. Inventory apps operate on product and stock data, not buyer identities.

How we use data

Data is used solely to provide inventory management features: sync, forecasting, purchase orders, reports, and email alerts you configure. We do not sell merchant data.

Data retention & deletion

When you uninstall the app, OAuth tokens are removed. Shopify may send a shop/redact webhook after uninstall; we delete all shop data within 30 days of that request.

Sub-processors

• Supabase (PostgreSQL database hosting)
• Vercel (application hosting)
• Inngest (background job processing)
• Resend (optional transactional email for alerts and PO notifications)

Contact

Questions or GDPR requests: support@stockme.gentletap.co