Privacy Policy

AccuStock — Shopify Inventory Tracking App
Effective Date: February 12, 2026  |  Last Updated: February 18, 2026

1. What AccuStock Does

AccuStock is a Shopify embedded admin app that tracks physical item-level inventory. When multiple Shopify product variants share the same physical stock (e.g., singles, multipacks, bundles), AccuStock keeps your real stock count accurate by processing order, cancellation, and refund events automatically.

2. Information We Access

When you install AccuStock, the app accesses the following data from your Shopify store via authorized API calls and webhooks:

• Order webhooks — We receive notifications for order creation, cancellation, and refund events. From these, we read line item data: variant IDs, product IDs, and quantities ordered. We use this information solely to calculate inventory adjustments.
• Product and variant data — We query your product catalog via the Shopify Admin API to display variant names and SKUs in the variant linking interface.
• Shop information — We store your shop domain and primary location ID to route inventory updates correctly.
• Inventory data — We write updated available quantities back to Shopify using the inventorySetQuantities API so your storefront reflects accurate stock levels.

3. Information We Store

AccuStock stores the following data in our database:

• Shop record — Your shop domain, session token, and primary Shopify location ID.
• Merchant staff authentication data — Merchant staff name and email from Shopify authentication are stored in encrypted session records for app functionality and are deleted when the app is uninstalled.
• Items — Physical inventory items you create (name, SKU, stock level, settings). These are merchant-defined and contain no customer data.
• Variant links — Mappings between your Shopify variant IDs and items, including units consumed per sale. No customer data.
• Inventory adjustments — An audit log recording order IDs, refund IDs, stock deltas, and before/after stock levels for each inventory change.
• Webhook event records — Deduplication keys, processing status, and minimized operational data for each webhook received. Payloads are stripped of all customer PII (names, emails, addresses, phone numbers, IP addresses) before storage. Only order/refund IDs, line item data (variant IDs, quantities), and restock information needed for retry processing are retained. All webhook data is automatically deleted when you uninstall the app.

4. Information We Do Not Collect

AccuStock does not collect, store, or process:

• Customer names
• Customer email addresses
• Customer physical addresses (billing or shipping)
• Customer phone numbers
• Customer IP addresses
• Payment or billing information
• Customer account credentials
• Any other personally identifiable information (PII) about your customers

Shopify webhook payloads contain customer fields, but our app strips all PII at the point of storage. We remove customer objects, billing/shipping addresses, email, phone, browser IP, and client details before persisting any webhook data. Only operational fields (order IDs, line items, variant IDs, quantities) are retained.

5. How We Use Your Data

We use the data we access and store exclusively to:

• Calculate stock changes when orders are placed, cancelled, or refunded
• Project derived inventory quantities back to Shopify so your storefront shows accurate availability
• Provide you with an audit log of all inventory changes for reconciliation and troubleshooting
• Retry failed webhook processing to ensure no orders are missed

We do not use your data for advertising, marketing, analytics, profiling, or any purpose unrelated to the core inventory tracking functionality described above.

6. Data Retention and Deletion

Your data is retained for as long as AccuStock is installed on your Shopify store.

Operational retention windows are:

• Webhook event records are automatically deleted after 30 days
• Order snapshots are automatically deleted after 365 days
• Audit log entries are retained for the lifetime of the app installation to provide a permanent inventory change history

When you uninstall the app, Shopify sends a shop redaction request within 48 hours. Upon receiving this request, we permanently delete all data associated with your shop, including:

• All inventory adjustments (audit log)
• All webhook event records
• All pending restoration records
• All repair job records
• All variant links
• All component stock records
• All component definitions
• Your shop record

This deletion is automatic and irreversible. No data is retained after the shop redaction process completes.

7. Third-Party Sharing

We do not sell, rent, trade, or otherwise share your data with any third party. Your data is transmitted only between your Shopify store and our servers for the purpose of inventory tracking.

Our application is hosted on Railway (railway.app). Data is stored in the United States via Railway infrastructure. For EU merchants, processing is based on contractual necessity to provide the inventory management service.

When configured, we use the following sub-processors:

• Resend (email delivery) — receives merchant email addresses for notifications
• Sentry (error monitoring) — receives shop domain and error context (no customer data or tokens)

Outside of these providers and Shopify, no other third-party services have access to your data.

8. Data Security

We protect your data using industry-standard practices:

• All communication between Shopify and our servers uses HTTPS/TLS encryption
• Webhook payloads are verified using HMAC signatures before processing
• Database access is restricted to the application server only
• Access tokens are encrypted at rest using AES-256-GCM and never logged or exposed

9. Your Rights

Under GDPR and applicable data protection regulations, you have the right to:

• Request your data — Shopify can send a customer data request on your behalf. Since we do not store customer personal information, these requests are acknowledged but no customer PII is returned.
• Request deletion — Uninstalling the app triggers automatic deletion of all your shop data within 48 hours.
• Contact us directly — You may contact us at any time to ask about your data or request its deletion.

10. Contact

If you have questions about this privacy policy or how AccuStock handles your data, please contact us:

Email: support@accustockapp.com

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.