Your data and privacy
This article sets out exactly what Restoc stores about you and your store, why it holds each item, where it is kept and how long. It also shows where in the app you change what is held, and where you remove it all.
Restoc is not open yet, so anything on this page about what it does is what it is being built to do.
What this article helps with
Read this before you connect a store, when a colleague asks what the app can see, or when you are deciding whether to keep your account open.
Restoc reads products, inventory levels and orders from one Shopify store so it can work out a reorder point per SKU and warn you when stock crosses it. Everything below is what that job requires, and nothing else is kept.
What Restoc stores, and why
- Your name, email address and a hash of your password. To sign you in. Reorder alerts are emailed to this address from the moment you connect a store, until you change or switch off email alerts in Settings > Alerts.
- Your store's .myshopify.com domain, a Shopify Admin API access token and that app's API secret key. The token is granted at install or pasted from your custom app. Both are used to read products, inventory levels and orders, and to verify the webhook deliveries Shopify signs with the secret key. Both are stored server-side and are never shown in the app.
- Sync bookkeeping. When your store last synced, whether its stock came from Shopify or sample data, how much of your catalogue it read, and any sync error, so a stalled or partial sync can be seen and fixed rather than quietly showing you stale stock. No product or order content beyond what is listed here.
- Tracked SKUs. Title, your own SKU code, Shopify variant id, current stock, lead time and the computed reorder point, to work out days of inventory remaining and when each SKU crosses its reorder point.
- Sales quantities and dates per SKU, with the Shopify order reference. To calculate sales velocity over your chosen window. No customer names, addresses or payment details are stored.
- Your alert settings. The email address reorder alerts go to, which is your account email until you change it, and a Slack webhook URL if you set one.
- Which setup steps your account has reached, meaning account created, store connected, first sync, first lead time saved, and when it reached each, so a setup that stalls can be found and fixed.
- Your plan tier, trial end date and the state of your Shopify subscription charge. Payment details stay with Shopify and never reach us.
- When you last used the app, at most once an hour, and which core actions you completed, such as a lead time saved or a report exported. First-party only, in our own database. No third-party analytics and no session replay. Only totals leave the product.
Where it is kept, and for how long
Your data sits on Amazon Web Services, in a single region alongside the app. Pages are served through CloudFront; the Postgres database stays in its region. There is no choice of data region.
It is kept while your account is open. Sales history feeds the velocity calculation for as long as you use the product, so it is not trimmed on a schedule. Usage events are deleted after 16 weeks. Deleting your account removes everything at once, and there is no separate archive of your data.
Three other services are involved. Shopify is the source of your products, inventory and orders, and bills your subscription on your Shopify invoice. Amazon Web Services hosts the app and its Postgres database, and sends reorder alert and account emails through Amazon SES. Slack receives reorder alerts at a webhook you configure, if you enable Slack alerts.
Change or remove what is held
- Check where alerts are sent
Open Settings > Alerts. The email address shown is your account email until you change it. Change it, or switch email alerts off, and no further reorder alerts are emailed.
- Remove the Slack webhook if you no longer want it
A Slack webhook URL is stored only if you set one, in Settings > Alerts. Clear it and Restoc stops sending alerts to that channel.
- Export everything first
Settings > Account exports a JSON file of everything held about your account and store. Take that file before you delete anything you may want later.
- Delete the account when you are done
Settings > Account deletes the account and everything stored about your store at once: the Shopify connection and its access token, every SKU, sales record, alert and report. You type your account email to confirm, and any active Shopify charge is cancelled.
- Ask for a data processing agreement if you need one signed
There is no standing agreement in place. Email support@restocapp.com and say what you need signed.
What is not in place
We would rather say this plainly than let you assume it.
- There is no independent security audit and no certification such as SOC 2 or ISO 27001.
- There is no single sign-on. Sign-in is email and password.
- There is no two-factor authentication.
- There is no standing data processing agreement. Ask if you need one signed.
- There is no choice of data region.
If this did not answer your question
Email support@restocapp.com with the question and your store domain. Every message there lands in the support desk.
If you came here to take your data out or to close the account, the two separate articles walk through each one in order: exporting your data, and deleting your account.
Questions
Do you store my customers' details?
No. Sales quantities and dates are stored per SKU with the Shopify order reference. No customer names, addresses or payment details are stored.
Can I choose which region my data is kept in?
No. It is held on Amazon Web Services in a single region alongside the app, and the Postgres database stays in its region. A choice of data region is not in place.
Where is my Shopify access token kept, and can I see it?
The Admin API access token and the app's API secret key are stored server-side and are never shown in the app. They are used to read products, inventory levels and orders, and to verify the webhooks Shopify signs with the secret key.
Is Restoc SOC 2 or ISO 27001 certified?
No. There is no independent security audit or certification of that kind.
Can I use SSO or two-factor authentication?
Not today. Sign-in is email and password. Single sign-on and two-factor authentication are not in place.
How long do you keep my sales history?
While your account is open. Sales history feeds the velocity calculation for as long as you use the product. Usage events are deleted after 16 weeks.
What happens to my data if I uninstall from my Shopify admin?
Uninstalling ends billing. To delete what is stored, use Settings > Account in the app, which removes the Shopify connection and its access token, every SKU, sales record, alert and report at once.
Can I stop Restoc emailing me altogether?
Switch email alerts off in Settings > Alerts. Reorder alerts go to your account email from the moment you connect a store until you change the address or switch them off there.