Privacy Policy

IdleStock - Shopify Dead Stock Detection App

Last updated: January 25, 2026

1. Introduction

IdleStock is a Shopify application that helps merchants identify dead stock (products that haven't sold within a configurable time period) and provides actionable recommendations. This privacy policy explains how we collect, use, and protect your data.

2. Data We Collect

When you install and use IdleStock, we access and store the following data from your Shopify store:

• Shop information: Store domain name
• User session data: Name, email address, and access tokens (for authentication)
• Product data: Product ID, title, SKU, price, cost per item, inventory quantity, variant information, and product images
• Order data: Order creation date and line item variant references (used solely to determine the last sale date of each product)
• App settings: Dead stock threshold days, currency preference, billing plan status

3. How We Use Your Data

Your data is used exclusively for the following purposes:

• Detecting dead stock (products unsold beyond your configured threshold)
• Calculating capital tied up in idle inventory
• Generating actionable recommendations (discount, bundle, or remove)
• Managing your subscription and billing

4. Data Retention

• Your data is stored only while IdleStock is installed on your store.
• When you uninstall the app, all associated data is automatically deleted via our app/uninstalled webhook handler.
• Upon receiving a shop/redact request from Shopify, all shop data is permanently removed from our systems.

5. Customer Data

We do NOT collect or store any customer personal information.

• We do not access customer names, emails, addresses, or any personally identifiable information (PII).
• From orders, we only use the order creation date and product variant references to determine when a product was last sold.
• No customer data is ever stored in our database.

6. Data Deletion

• Automatic: All data is deleted when you uninstall IdleStock from your store.
• On request: You can request manual data deletion by emailing us at the address below.
• Shopify compliance: We process all customers/data_request, customers/redact, and shop/redact webhooks as required by Shopify.

7. Third-Party Sharing

• We do not share, sell, or transfer your data to any third parties.
• We access your store data exclusively through the Shopify API with read-only permissions.
• No analytics or tracking services are used within the app.

8. Security

• All communication is encrypted via HTTPS/TLS.
• Access tokens are stored securely and encrypted at rest.
• Data is stored in a secured PostgreSQL database.
• We use minimal API scopes: read_inventory, read_orders, read_products.

9. Your Rights (GDPR/CCPA)

As a merchant, you have the right to:

• Access: Request a copy of the data we hold about your store.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of all your data (or simply uninstall the app).
• Restriction: Request that we limit processing of your data.
• Portability: Request your data in a machine-readable format.

10. Contact

For any privacy-related questions, data requests, or concerns, please contact us:

Email: msengiloglu@gmail.com

---

This privacy policy is effective as of January 25, 2026, and applies to all users of the IdleStock Shopify application.