StockFlow collects data necessary to provide automated inventory management and notification services.

Merchant Data

• Your Shopify store domain and access token for authentication
• Product catalog including titles, SKUs, variants, and inventory levels
• Product collection assignments and publication status
• Your notification preferences and low-stock threshold settings
• Your merchant notification email address for alerts

Customer Data

• Email addresses of customers who subscribe to back-in-stock notifications
• Product IDs and variant IDs associated with each notification request
• Subscription timestamp and notification status (sent/pending/cancelled)

We collect only the minimum data necessary to operate the StockFlow service. Customer emails are collected only when customers voluntarily opt in to receive restock notifications for specific products.

We use the data we collect exclusively to provide StockFlow services:

• Monitor product inventory levels in real time to trigger automatic visibility changes
• Automatically hide out-of-stock products from collections and search results
• Automatically restore products to collections when inventory is replenished
• Send back-in-stock email notifications to customers who requested them
• Send low-stock alerts to merchants when inventory falls below configured thresholds
• Provide analytics on hidden products, restock notifications sent, and inventory trends

We do not sell, rent, share, or trade any merchant or customer data with third parties for advertising, marketing, or any other commercial purpose.

StockFlow sends two types of email notifications:

Customer Restock Notifications

When a customer subscribes to be notified about a product, we store their email address and send a one-time notification when that product is back in stock. Each notification email includes a clear unsubscribe link. Once the notification is sent, the subscription is automatically removed unless the product goes out of stock again and the customer resubscribes.

Merchant Low-Stock Alerts

We send email alerts to merchants when inventory levels fall below configured thresholds. These alerts are sent to the notification email address specified in your StockFlow settings. You can adjust alert thresholds or disable these notifications at any time from your dashboard.

All data is stored securely on Railway infrastructure using PostgreSQL databases. We implement industry-standard security measures including:

• All connections encrypted via HTTPS/TLS
• Secure OAuth authentication through Shopify’s API
• Environment-based secret and credential management
• Database access restricted to authenticated services only
• Regular automated backups of all stored data

Customer email addresses are stored securely and used exclusively for sending requested restock notifications. No payment or financial information is ever stored by StockFlow — all billing is handled by Shopify.

We retain merchant data for as long as StockFlow remains installed on your store. Customer notification subscriptions are retained until:

• The notification is sent (subscriptions are automatically deleted after sending)
• The customer unsubscribes using the link in their confirmation or notification email
• The merchant uninstalls StockFlow
• A data deletion request is received via GDPR webhook

When you uninstall StockFlow, your store is immediately marked as inactive. Within 48 hours of receiving Shopify’s shop/redact webhook, we permanently delete all data associated with your store including product data, notification subscriptions, settings, and activity logs. You may also request immediate deletion at any time by contacting us at [email protected]

StockFlow is fully compliant with the General Data Protection Regulation (GDPR) and Shopify’s mandatory privacy requirements. We respond to all three compliance webhooks:

• customers/data_request — we provide all notification subscriptions and activity associated with the requesting customer’s email address
• customers/redact — we permanently delete all notification subscriptions and data associated with the requesting customer
• shop/redact — we permanently delete all data associated with the uninstalled merchant store

For merchants operating in the European Union, you remain the data controller for your customers’ data. StockFlow acts solely as a data processor on your behalf. Customers have the right to request access to or deletion of their notification subscription data at any time by contacting you directly or using the unsubscribe link in notification emails.

StockFlow integrates with the following services to provide its functionality:

• Shopify API — to read product data, inventory levels, and manage product visibility in collections
• Email Service Provider — to send back-in-stock notifications to customers and low-stock alerts to merchants
• Railway — cloud infrastructure provider for secure data storage and application hosting

We do not share customer email addresses or any other personal data with third parties beyond what is necessary to send requested notifications. Email service providers are bound by their own privacy policies and security standards.

StockFlow does not use cookies or tracking scripts on your storefront. The back-in-stock notification signup form operates through direct API calls and does not store any information in customer browsers. For merchants accessing the StockFlow dashboard within Shopify, standard Shopify session management applies as governed by Shopify’s privacy policy.

As a merchant, you have full control over your data:

• View all active notification subscriptions in your StockFlow dashboard
• Manually cancel any customer notification subscription at any time
• Configure low-stock alert thresholds or disable alerts entirely
• Export notification data and activity logs from your dashboard
• Request complete data deletion by uninstalling the app or contacting support

Customers who subscribe to restock notifications have the right to unsubscribe at any time using the link provided in their subscription confirmation or notification email.

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated “last updated” date. Continued use of StockFlow after changes are posted constitutes your acceptance of the updated policy. We will notify active merchants of material changes via email or dashboard notification.

If you have any questions about this privacy policy, wish to request data deletion, or need assistance with notification management, please contact us at:

Apps Alchemy
[email protected]

We are committed to addressing privacy concerns promptly and transparently.