Privacy policy

This policy explains what information RedRose ("we") collects through the Reorder Radar website and Shopify app, why, and what you can do about it. Contact: redroseads1@gmail.com.

Information from Shopify stores that install the app

When a merchant installs Reorder Radar, Shopify grants read-only access to the following store data, which we store to calculate recommendations:

• Store profile: shop domain, store name, store contact email, currency and timezone.
• Products and variants: titles, SKUs, vendor, price, unit cost, inventory tracking setting.
• Inventory: available and incoming quantities per location, and daily stock snapshots.
• Orders: for each order line, only the variant, quantity, order date, refund quantities, and whether the order was cancelled or a test. We do not store customer names, email addresses, phone numbers, shipping or billing addresses, or payment details.
• Data you enter in the app: supplier lead times, minimum order quantities, purchase orders and settings.

Shopify access tokens are encrypted at rest. We use store data only to provide the app's features (recommendations, analytics, digest emails and purchase-order drafts) and to operate and support the service. We do not sell store data or use it for advertising.

Information from website visitors

• Analytics: we record page views and a few actions (such as using the calculator) without cookies. We store the page path, referring website, campaign tags and a visitor identifier derived from a one-way hash of your IP address and browser with a salt that changes daily, so visits can't be linked across days. We don't store IP addresses. Browsers that send Do Not Track or Global Privacy Control are not tracked. Events are deleted after 180 days.
• Early-access and contact forms: your email address and any optional answers you give (store URL, catalog size, current tools, biggest problem, marketing consent). We use them to send your install link and product updates about Reorder Radar and, if you opted in, occasional inventory planning tips.
• Free CSV report: files you add are processed in your browser and are not uploaded to our servers. We record only aggregate counts (number of SKUs analyzed) as an analytics event.

Service providers

We use providers to run the service. They process data on our behalf under their own security and privacy terms:

• Hosting and serverless compute (for example Vercel).
• Managed PostgreSQL database hosting (for example Neon).
• Transactional email delivery (Resend).
• Shopify, for app installation and billing.

Retention and deletion

• When a merchant uninstalls the app, we stop syncing and delete access tokens immediately.
• Shopify sends a data-erasure request (shop/redact) 48 hours after uninstall; we then permanently delete all data stored for that store. Customer data-request and erasure requests are acknowledged; we hold no customer personal data to export or erase.
• Install-link and contact form submissions are kept until you ask us to delete them, or for up to 24 months without contact.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and California law), you can ask to access, correct, delete or export your personal information, object to or restrict processing, and withdraw consent. Email redroseads1@gmail.com. We respond within 30 days. You can also complain to your local data protection authority.

Legal bases (EEA/UK): performance of a contract for app features, legitimate interests for security, analytics and service improvement, and consent for marketing emails.

International transfers

Our providers may process data in the United States and other countries. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by those providers.

Changes

We will post updates here and change the date above. Material changes affecting merchants will also be emailed to the store contact address.