1. Introduction

Inventory Optimizer ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify app.

2. Information We Collect

2.1 Shopify Store Data

When you connect your Shopify store, we collect:

• Store domain and basic store information
• Product data (SKUs, titles, prices, inventory levels)
• Order data (last 12 months) for analysis purposes
• Inventory levels and locations

2.2 Account Information

We collect:

• Shop owner email address (for notifications)
• Shopify OAuth access tokens (encrypted and stored securely)
• Subscription tier and billing information

2.3 Usage Data

We automatically collect:

• Sync job history and status
• Analysis results and recommendations
• Manual data inputs (unit costs, lead times)

3. How We Use Your Information

We use the collected information to:

• Provide inventory optimization and analysis services
• Calculate safety stock, reorder points, and EOQ recommendations
• Send email notifications about sync status and analysis results
• Manage your subscription and billing
• Improve our services and develop new features
• Respond to your support requests

4. Data Storage and Security

4.1 Data Storage

Your data is stored securely using AWS services:

• DynamoDB: Store connections, sync jobs, and manual data inputs
• S3: File storage (if you upload CSV files)
• SSM Parameter Store: Secure storage for Shopify access tokens (encrypted with AWS managed KMS keys)

4.2 Security Measures

We implement industry-standard security measures:

• Access tokens encrypted and stored in AWS SSM Parameter Store (using AWS managed KMS keys)
• Session-based data isolation
• HTTPS encryption for all data transmission
• Regular security audits and updates

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only:

• With Shopify (via their API) to sync your store data
• With AWS services (DynamoDB, S3, SES, SSM Parameter Store) for data storage and processing
• When required by law or to protect our rights
• In case of a business transfer (with prior notice)

6. Your Rights

You have the right to:

• Access: Request a copy of your data
• Delete: Delete all your data from our system at any time
• Disconnect: Disconnect your Shopify store and stop data sync
• Update: Update or correct your information
• Export: Export your analysis results

To exercise these rights, contact us or use the "Delete All Data" feature in the app dashboard.

7. Data Retention

We retain your data:

• While your Shopify store is connected to our app
• For 30 days after you disconnect your store (soft delete)
• Permanently deleted upon your request or after the retention period

8. Third-Party Services

Our app integrates with:

• Shopify: For store data synchronization
• AWS Services: For data storage and processing
• AWS SES: For email notifications
• Auth0: For sign-in when you connect Stockimizer to ChatGPT
• OpenAI (ChatGPT): Only if you choose to connect the Stockimizer plugin, as described in section 9
• Google Analytics: For aggregated, pseudonymous usage measurement

These services have their own privacy policies. We encourage you to review them.

9. ChatGPT Plugin

Stockimizer offers an optional plugin for ChatGPT. It is off by default. Nothing described in this section happens unless you explicitly connect your Stockimizer account to ChatGPT and link a store using a one-time code.

9.1 What we receive

• An opaque user identifier issued by our identity provider (Auth0) when you sign in
• Your email address and name from that sign-in, used only to identify your account
• The parameters of each request you make, such as a budget amount or a number of days

We do not receive your ChatGPT conversations. The plugin cannot read your chat history, and it never requests it.

9.2 What we return to ChatGPT

When you ask a question, we return only inventory analysis for the store you linked. Specifically:

• Your store domain
• Product SKUs and product-level stock levels
• Unit costs, forecast demand, days of supply and lead times
• Reorder quantities, excess stock values and purchase recommendations
• Aggregate counts and totals, such as inventory value at cost

We do not return customer names, customer contact details, order-level customer data, payment information, access tokens or internal system identifiers. This data is sent to OpenAI so that ChatGPT can present it to you, and is handled under OpenAI's privacy policy once it reaches them.

9.3 What the plugin cannot do

Every plugin tool is read-only. The plugin cannot change inventory, place or modify orders, alter your Shopify store, or change your Stockimizer account.

9.4 Retention and disconnecting

We store the link between your ChatGPT identity and your store until you remove it. Unused link codes are deleted automatically after 10 minutes. Analysis results are generated on demand and cached in memory only, for a few minutes. You can disconnect ChatGPT at any time from your Stockimizer dashboard, which deletes the link immediately.

10. Children's Privacy

Our app is not intended for users under 18. We do not knowingly collect information from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: saru@stockimizer.com
• Through the app: Use the chat button in the bottom right corner