Privacy Policy

Replinish ("we", "us", or "our") is a Shopify application that helps merchants manage inventory, forecasting, and purchase orders. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

1. Data We Collect

We collect only the data needed to provide the Replinish service:

• Store data: Product catalog, variants, inventory levels, and historical sales aggregates from your Shopify store.
• Purchase order data: POs you create within Replinish, including supplier details and quantities.
• Supplier data: Names, contact details, and lead times you enter manually.
• Preferences: Your service level, buffer settings, and planning mode.
• Billing data: Subscription plan status (managed by Shopify; we do not store payment card details).

We do not collect personal customer data (names, addresses, payment information) from your customers.

2. How We Use Your Data

We use collected data solely to provide and improve the Replinish service:

• Generate inventory forecasts and reorder recommendations.
• Display dashboards, alerts, and reports within the app.
• Send purchase orders to suppliers (via email, when configured).
• Improve forecasting accuracy over time.

We do not sell your data. We do not use your data for advertising.

3. Data Sharing

We share data only with:

• Shopify: Required to operate as a Shopify Partner app.
• Neon (database): Your data is stored in a Postgres database hosted by Neon, Inc., in a US data center.
• Resend (email): Used to send PO emails to your suppliers.
• Cloudflare (hosting): The app runs on Cloudflare Workers.

All sub-processors are contractually bound to protect your data.

4. Data Retention

We retain your data for as long as your Replinish subscription is active. When you uninstall the app or close your account, your data is deleted within 7 days, except where retention is required by law.

One exception: we keep a one-way cryptographic hash of your store’s domain indefinitely, with no other information attached. It cannot be reversed, and we cannot use it to identify or contact you. Its only purpose is to record that your store has already used its free trial, so that each store receives one trial. Nothing else is retained after deletion.

5. GDPR & Privacy Rights

If you or your customers are located in the European Economic Area, you have the right to access, correct, and delete personal data we hold. To exercise these rights, contact us at privacy@replinish.app.

We process Shopify Customer Data only as a data processor on behalf of merchants, as required by Shopify's Partner Program Agreement.

6. Security

We use HTTPS for all data in transit and encrypted databases at rest. Access to production systems is restricted to authorized personnel.

7. Changes to This Policy

We may update this policy from time to time. We will notify merchants of material changes via the app or email. Continued use of Replinish after changes means you accept the updated policy.

8. Contact

Questions? Email us at privacy@replinish.app.