Privacy Policy

Effective June 22, 2026

Data We Collect

StockFlows accesses your Shopify store data to provide inventory management services. This includes: product and variant information, inventory levels, order data, location details, and staff member information. We do not sell or share your data with third parties.

How We Use Your Data

Your data is used exclusively to provide inventory tracking, demand forecasting, purchase order management, and alert notifications within the StockFlows app. Forecasting models are trained on aggregated, anonymized data across all stores — never on your specific data.

Data Storage

All data is stored in encrypted PostgreSQL databases hosted on secure cloud infrastructure. We use industry-standard AES-256 encryption for sensitive fields. Backups are encrypted and retained for 14 days.

Data Retention

Active store data is retained while the app is installed. When you uninstall, all store data is deleted within 48 hours. Audit logs are retained for 90 days for security purposes. Anonymized analytics aggregates are retained indefinitely for product improvement.

Third-Party Services

StockFlows integrates with the following third-party services. All integrations are optional except Shopify (required for the app to function). Each service receives only the minimum data necessary to function. We do not use analytics trackers or advertising pixels.

ShopifyCore platform. Receives: store data, products, orders, inventory. Required.
ResendEmail delivery for alerts. Receives: recipient email, alert content. Optional — requires RESEND_API_KEY.
TwilioSMS delivery for critical alerts. Receives: phone number, alert message. Optional — requires TWILIO credentials.
SlackWebhook delivery for alerts. Receives: alert content. Optional — requires SLACK_WEBHOOK_URL.
OpenCode APIAI analysis of aggregated inventory data. Receives: product counts, stock levels, forecasts, alerts. No PII. Optional — requires OPENCODE_API_KEY. Can be disabled in Settings.
SentryError tracking. Receives: error reports with stack traces. Optional — requires SENTRY_DSN.

Your Rights

You can request a copy of your data, request deletion of your data, or revoke data access at any time through your Shopify admin panel. We comply with GDPR, CCPA, and other applicable data protection regulations.

AI and Data Processing

StockFlows optionally uses artificial intelligence to generate inventory insights and explain forecast data. When enabled, aggregated inventory data (product counts, stock levels, forecast summaries, and alert lists) is sent to the OpenCode API using the Big Pickle model for analysis.

The AI never receives customer PII, individual order data, or payment information. It receives only aggregated inventory metrics needed to generate actionable recommendations.

Opt-out: You can disable AI features at any time in Settings. When AI is disabled, all AI-powered insights and forecast explanations are turned off. The core statistical forecasting engine (Exponential Smoothing) continues to work without any external API calls.

StockFlows does not store AI request data. AI requests are processed in real-time and not retained by StockFlows. The OpenCode API's own data retention policy applies to requests sent to their service.

Contact

For privacy-related inquiries, contact us at [email protected]

Back to StockFlows