Privacy Policy

Effective date: 2026-08-08

Restack (“Restack”, “we”, “us”, or “our”) is a Shopify app that helps merchants manage inventory reordering. This Privacy Policy explains what information the app accesses, how we use it, and the choices available to you. It applies to merchants who install Restack (“you”) and to the data available through your Shopify store. Restack is developed and operated independently under the business name “Restack.”

1. Summary

Restack is designed to access as little data as possible. We read product, inventory, and order information from your Shopify store only to calculate reorder points and generate purchase orders. We do not collect, store, or use your customers’ personal information — including names, addresses, email addresses, phone numbers, or payment details.

2. Information we access

When you install and use Restack, we access the following data through Shopify’s Admin API:

• Store information: your store’s domain (the .myshopify.com URL) and the access credentials Shopify issues to the app.
• Product and inventory data: product titles, variants, SKUs (where set), supplier/vendor information, and current inventory quantities.
• Order data — quantities only: for each product variant, the number of units sold over a recent period. We use this solely to calculate average daily sales and reorder points.

Information we do NOT collect

To keep our data footprint minimal, Restack does not read, store, or process:

• Customer names, or shipping and billing addresses
• Customer email addresses or phone numbers
• Payment or financial information
• Any other information that identifies your individual customers

Although Shopify order records may contain customer personal information, Restack reads only the line-item quantities from each order and does not retrieve or retain customer-identifying fields.

3. How we use information

We use the information above only to:

• Calculate reorder points and identify products that need reordering
• Generate purchase orders (PDF/CSV) for your suppliers
• Reflect received stock back into your Shopify inventory, with a change history

We do not use your data for advertising or profiling, or for any purpose unrelated to the app’s inventory features. Your Shopify inventory remains the source of truth; Restack proposes changes and records history rather than taking ownership of your data.

4. Data storage and security

Restack stores the data it needs to operate on cloud infrastructure provided by Render, including a PostgreSQL database hosted in the United States. We take reasonable technical and organizational measures to protect this data. Access credentials issued by Shopify are stored securely and used only to communicate with your store.

5. Service providers

We do not sell your data, and we do not share it with third parties for their own purposes. We rely on the following service providers to operate the app:

• Shopify — the platform your store runs on and the source of the data described above.
• Render — cloud hosting and database services.

These providers process data only as needed to provide their services to us.

6. Data retention and deletion

We retain your store’s data only while Restack is installed.

• When you uninstall Restack, we stop accessing your store and begin removing the associated data.
• Restack supports Shopify’s mandatory data-protection requests. When Shopify sends a customer data request, a customer redaction request, or a shop redaction request on your behalf, we respond as required. Because Restack does not store customer personal information, customer data requests typically return no personal data.
• Approximately 48 hours after you uninstall the app, Shopify sends a shop redaction request, upon which we delete your store’s remaining data.

7. Your rights

Depending on where you are located, you may have rights under privacy laws such as the GDPR or the CCPA, including the right to access, correct, or delete personal data. Because Restack processes store and merchant data rather than consumer personal data, most requests can be handled by uninstalling the app or by contacting us at the address below. For requests relating to your customers’ data, please use Shopify’s data-request tools, which Restack honors automatically.

8. International data transfers

Your data may be processed and stored in the United States by our hosting provider. Where required, we take steps to ensure that such transfers comply with applicable data protection laws.

9. Children’s privacy

Restack is a business tool intended for merchants and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date shown above. Significant changes will be communicated through the app or our website.

11. Contact

If you have questions about this Privacy Policy or how Restack handles data, please contact us at:

getrestack@gmail.com

We aim to respond within 2 business days.