Privacy Policy

Restockwell is operated by datadir s. r. o., Bauerova 1205/7, 040 23 Košice, Slovakia (company ID / IČO 57 582 904). We are the data controller for your account data — your store domain and plan/billing status — and a data processor for the shopper personal data we handle on your behalf, namely the email addresses (and the variant, product and locale) collected through the “Notify me” form. As the merchant, you are the controller of your shoppers' personal data; we process it only on your instructions to run the back-in-stock service. For any privacy question, contact us at hello@datadir.co.

Restockwell requests only the two read-only Shopify scopes it needs to do its job:

• Products & variants (read_products) — titles, variant IDs and their availability, so we know which variants are sold out and which a shopper is asking about.
• Inventory levels (read_inventory) — available quantities and their changes over time, so we can detect the moment a sold-out variant is back in stock and trigger the alerts.

We do not request access to your orders or customers. Because we never touch Shopify's protected customer fields, Restockwell involves no Protected Customer Data under Shopify's policy. Restockwell is also read-only: it never writes to your products, inventory, or anything else in your store.

When one of your shoppers clicks the “Notify me when back in stock” button on a sold-out variant, their browser sends us, through Shopify's signed app proxy (from your store's own domain):

• The shopper's email address — this is personal data of the shopper, provided by them so we can notify them.
• The variant and product they want to be notified about.
• Their locale (e.g. language/region), used to send the alert in the right language.

Shopify signs each of these requests so we can verify it genuinely came from your store. We do not ask for, and shoppers do not send us, their name, phone number, address, or payment details.

• Your store's .myshopify.com domain and an offline access token, so the app can watch inventory in the background.
• Each shopper's email address, the variant and product they are watching, their locale, and the timestamp of their sign-up.
• Per-variant state we derive from inventory changes (was it sold out, when it last changed), so we can detect a restock exactly once.
• A send record for each alert (which subscription, the restock event, and whether it was delivered), used to avoid sending duplicate emails.

The only personal data we store is the shopper email address (and the variant, product and locale tied to it), which we process on your behalf to send the back-in-stock alerts your shoppers request.

We use the data solely to provide the service to you and your shoppers: watching your inventory for sold-out variants, detecting when they are back in stock, and emailing each waiting shopper exactly one back-in-stock alert for that restock. We do not sell your data or your shoppers' data, we do not use it for advertising, and we do not share it with third parties except the infrastructure providers below. We do not use it for any automated decision that has a legal or similarly significant effect on any individual.

We use a small number of infrastructure providers, all in the EU/EEA:

• Shopify — the platform your store and our app run on, and the source of the product and inventory data we read (under Shopify's own DPA).
• Hetzner Online GmbH (Germany, EU) — application hosting and database.
• Scaleway SAS (France, EU) — encrypted, off-site database backups.
• Bunny.net (BunnyWay d.o.o., Slovenia, EU) — authoritative DNS for our domain.
• Transactional email relay (an EU/EEA SMTP provider) — delivers the back-in-stock alert emails. It processes the shopper's email address only to deliver that alert.

A shopper's subscription is removed when they unsubscribe, or once their back-in-stock alert has been sent (per your settings) — we keep an email address only for as long as needed to deliver the alert it was given for. When you uninstall the app, Shopify notifies us and we delete your access token immediately. About 48 hours after uninstall, Shopify sends a shop/redact request, and we erase all remaining data for your store — every subscription (including shopper emails), the per-variant state, and the send records. Encrypted backups roll off on a 30-day cycle.

We honour Shopify's customers/data_request and customers/redact webhooks. If a shopper's email is on file, in response to a data request we can provide the record we hold for them, and in response to a redaction request we erase that shopper's email and related records. You or a shopper can also request access or deletion at any time by emailing hello@datadir.co.

Data is encrypted in transit (TLS) and backups are encrypted at rest. Each store's data is isolated at the database layer with row-level security, so one store can never read another's. Access to production systems is restricted, on a least-privilege basis, to the operator of the service. Access tokens are stored server-side and never exposed to the browser.

If you (or a shopper) are in the EEA/UK, you have the right to access, correct, export, or delete the personal data we hold, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Slovakia, the Úrad na ochranu osobných údajov SR). Our lawful basis for processing your account data is the performance of our contract with you; we process shopper email addresses on your behalf, on your instructions, to send the alerts shoppers request. To exercise any right, contact hello@datadir.co; we respond within one month.

All personal data is stored in the European Union — application and database on Hetzner (Germany) and encrypted backups on Scaleway (France). Back-in-stock alert emails are sent through an EU/EEA email relay. We do not transfer personal data to a third country except to Shopify, which processes under its own DPA and adequacy/Standard Contractual Clauses.

We may update this policy as the app evolves. Material changes will be posted here with a new “last updated” date.