StockNest ("the App", "we", "our", "us"), published by AppNest Studio, is a Shopify app that monitors inventory across locations, alerts you to low, out-of-stock and negative stock, and applies bulk stock adjustments with undo. This policy explains what data the App accesses, why, how long we keep it, and who it is shared with.
Contact: support@appnest.studio
1. Who the data belongs to
The App acts as a data processor on behalf of the installing merchant (the data controller). We process the merchant's Shopify store data solely to provide the inventory features the merchant uses.
2. What we access and why
| Scope | Why |
|---|---|
read_products |
Product and variant titles and SKUs, to label inventory records |
read_inventory, write_inventory |
Read stock levels per location; apply the adjustments you explicitly request |
read_locations |
Location names, to show where stock sits |
read_orders |
Forecasting (Pro plan) only. The variant and quantity of each line item sold or refunded, reduced immediately to units per variant per day |
We do not request customer, payment or checkout scopes. Order data is never stored as orders: no order numbers, names, addresses, emails or prices are kept, only the aggregate units-per-variant-per-day ledger (Shopify Protected Customer Data Level 1, no customer fields).
3. What we store
| Data | Stored? | Notes |
|---|---|---|
| Shopify session / access token | Yes | Required to call the Admin API |
| Inventory cache (SKU, product/variant title, location name, quantity) | Yes | So low-stock and drift can be detected without re-querying Shopify |
| Configuration (reorder points, alert email / Slack webhook, plan) | Yes | Your settings |
| Operation history (bulk adjustments, per-record results) | Yes | Progress display and undo |
| Sales ledger, units sold/refunded per variant per day | Yes (Pro) | Kept for 400 days for velocity and days-of-cover; no order or buyer details |
| Customer / buyer personal data | No | Never written anywhere |
4. Data retention & deletion
- Data persists while the App is installed.
- On app uninstall we remove your session; on the Shopify
shop/redactcompliance webhook (48 hours after uninstall) we permanently delete all data we hold for your shop. - We honour the Shopify
customers/data_requestandcustomers/redactwebhooks; because we hold no customer data, there is nothing to return or erase.
5. Subprocessors / third parties
| Provider | Purpose | Data shared |
|---|---|---|
| Hosting (Railway) + Postgres/Redis | Run the App | Stored data listed in §3 |
| Resend (if configured) | Alert emails | Your alert address + the alert contents |
| Slack (if configured) | Alert messages | Your webhook + the alert contents |
| Sentry (if configured) | Error tracking | Diagnostic error data |
We do not sell, rent or share your data, and we do not use it for advertising.
6. International transfers
AppNest Studio operates from India, and the providers listed above may process data in regions outside your own. Where a transfer leaves the UK or the European Economic Area, we rely on the Standard Contractual Clauses incorporated into those providers' data-processing terms. Write to support@appnest.studio if you need detail on a specific provider.
7. Security
- All traffic is over HTTPS/TLS; access is authenticated with Shopify session tokens.
- Secrets live in environment variables, not in code.
- We store the minimum necessary and no customer data.
8. Your rights
Merchants can delete their data by uninstalling the App (triggers full deletion) or by contacting us at the address above.
9. Changes
We will update this policy as the App evolves and revise the "Last updated" date above.