Privacy Policy
InventoryIQ · Last updated 22 July 2026
InventoryIQ (“the App”, “we”, “us”) is operated under the trading name InventoryIQ. This policy explains what data the App collects from a Shopify merchant’s store, how we use it, and the rights available to merchants and their customers. By installing InventoryIQ you agree to this policy.
Information we collect
When you install the App, we request the access scopes shown during installation and, with your authorization, access the following from your Shopify store:
- Store information — your myshopify domain, store owner email, plan, and app settings.
- Products & inventory — product/variant titles, SKUs, prices, images, and inventory levels, used to match batches and power FEFO suggestions and flash sales.
- Batch data — batch numbers, manufacturing/expiry dates, and quantities that you enter or import.
- Order data — for orders that consume tracked batches, we store order references and, for batch recall/traceability, the customer name, email, and shipping address associated with those orders.
We do not collect payment card details. Billing is handled entirely by Shopify’s Billing API.
How we use it
- Track batch expiry and surface at-risk inventory (dashboard, alerts, reports).
- Recommend and run flash-sale discounts to recover revenue before stock expires.
- Send expiry alert digests (in-app, and by email to the store owner or configured recipients).
- Produce recall reports that identify which orders/customers received a given batch.
- Compute analytics such as the Revenue Recovery Score.
We do not sell your data or your customers’ data, and we do not use it for advertising.
Sharing & sub-processors
Data is processed on our hosting infrastructure and transmitted to/from Shopify. Alert emails are delivered through our email provider. We share data only with sub-processors necessary to operate the App, and never with unrelated third parties. Contact us for the current sub-processor list.
Data retention & deletion
When you uninstall the App, your store record is soft-deleted and then permanently purged after a short grace window (default 7 days) to allow reinstallation. We also honor Shopify’s mandatory compliance webhooks:
customers/redact— we erase the stored customer name, email, and shipping address for the requested customer.shop/redact— we permanently delete all data for the store (fired ~48 hours after uninstall).customers/data_request— we surface the data we hold for a customer on request.
Security
Access tokens are stored securely and are expiring offline tokens. All webhook requests are HMAC-verified, embedded requests are authenticated with Shopify session tokens, and administrative changes are audit-logged.
Your rights
Merchants and their customers may request access to, correction of, or deletion of their data. Customer requests are typically made through the store; you can also contact us directly.
Contact
Questions about this policy or your data: hello@appfactoryhq.xyz. We aim to respond within two business days.