Privacy Policy

1. Introduction

Go Stock ("Go Stock", "we", "our", or "the App") is a Shopify application that helps merchants find slow-moving and dead stock, see how much capital that inventory is holding, turn selected items into clearance campaigns, and apply price rules in bulk. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to merchants who install and use Go Stock. By installing or using the App, you agree to the practices described in this Privacy Policy.

2. Information We Collect

When you install Go Stock, you authorize the App through Shopify's OAuth flow with the following access scopes: read_products, write_products, read_inventory, read_orders, write_files, write_publications, read_online_store_navigation, and write_online_store_navigation. Through this authorization we may access:

• Store and merchant information — your shop domain, store email address, store name, plan, currency, and timezone, along with the access token Shopify issues to the App.
• Product and variant data — product and variant titles, SKUs, options, images, vendor, category, and prices. We read this data to analyse your catalog, and may write prices back or create and update collections when you ask the App to.
• Inventory data — on-hand quantities per location, whether an item is tracked, and the unit cost recorded on the inventory item, which we use to calculate the capital your stock is holding.
• Order data — line-item level only: order id, line id, variant id, quantity, unit price, the time it occurred, and whether it was a sale, refund, or cancellation. By default we read a rolling window of the most recent 60 days, extended to up to 365 days if Shopify approves the read_all_orders scope.
• Files and publications — collection images you upload to your Files library through the App, and the publication status of collections the App creates on your Online Store.
• Online store navigation — your main menu, which the App reads and updates when you publish a clearance campaign.
• Notification settings — the email address you choose for reports, your digest preferences, and a log of emails the App has sent (template, recipient, delivery status, and time sent).

Go Stock does not request, receive, or store your customers' personal information — no names, email addresses, shipping addresses, or payment details. Order data is reduced to identifiers, quantities, and prices, and is used only to calculate how fast each variant sells.

3. How We Use Your Information

We use the information described above solely to:

• Identify inventory that is aged, slow-moving, or overstocked, and calculate the capital it is holding per variant.
• Create and run clearance campaigns, including the collection, discount, and menu entry they rely on.
• Calculate price rules and apply the resulting prices to your store in bulk, at your request.
• Send weekly digests, monthly reports, and campaign notifications to the email address you configure.
• Provide technical support and improve the App's reliability.

4. Sharing and Disclosure

We limit sharing of your information to the following cases:

• Shopify — data is exchanged with Shopify through its official Admin API to perform the functions you initiate.
• Legal authorities — where we are required to do so by applicable law or valid legal process.

Go Stock does not send your data to any AI, advertising, analytics, or data brokerage service.

5. Data Retention

We retain store and merchant information, inventory and campaign data, and authentication tokens only for as long as it is needed to provide the App's functionality and while your store has the App installed. Within that period:

• Order lines are kept for the rolling 60-day window (or up to 365 days where approved); anything older is removed.
• Email delivery logs are kept for 180 days.
• Background job records and the internal webhook queue are kept for 30 days.

6. Data Deletion

You can remove your data at any time by uninstalling Go Stock from your Shopify admin. In accordance with Shopify's requirements, the App responds to the following mandatory compliance webhooks:

• customers/data_request — the App stores no customer personal data, so there is nothing to return; every request is acknowledged.
• customers/redact — the App stores no customer personal data, so there is nothing to erase; every request is acknowledged.
• shop/redact — permanently deletes your store's data from every one of the App's databases after the App is uninstalled.

When Shopify notifies us that the App has been uninstalled, we delete your access token immediately and stop all scheduled work for your store. After redaction, your associated data is permanently deleted and is not retained.

7. Data Security

We use industry-standard measures to protect your information, including encryption of data in transit and the OAuth 2.0 protocol for authorization. Access tokens are encrypted before being stored, other credentials are held in Google Secret Manager, and the App's internal services are not exposed to the public internet — they authenticate to each other using Google Cloud IAM identity tokens. Every webhook we receive is verified against Shopify's HMAC signature before it is processed.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and post the updated policy here. Your continued use of the App after changes take effect constitutes acceptance of the revised policy.

9. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us:

• Go Feed Group
• Email: [email protected]