Privacy policy

Updated September 7, 2026.

Restock Radar is operated by an individual in New York, USA, using the trading name Telamanus. Telamanus is not an incorporated legal entity. Contact support@getrestockradar.com about privacy requests or this policy.

Information we process

Store and authentication: Shopify store domain, store name, business email, currency, access scopes, tokens and session records. Shopify authentication may also supply authorized staff identifiers and profile details. We do not ask for your Shopify password or payment-card details.
Catalog and inventory: product and variant identifiers, titles, SKUs, barcodes, vendors, tracking status, unit costs and stock quantities. Active-location quantities are combined for reorder calculations.
Sales: order and variant identifiers, order date, item quantities and cancellation status. Order identifiers can be linked to a customer by the merchant, so we treat them as protected data. Bulk queries do not request customer names, delivery addresses, emails or payment details. Shopify webhook payloads may include additional fields; our sales handler extracts only the fields above and does not save the raw payload.
Information you enter: supplier business names and emails, optional purchase-order notes, quantities and costs, app settings and your weekly-digest choice. Please do not enter personal addresses, payment details or other sensitive information in notes.
Communications and operations: support emails you send, delivery information, subscription status, sync status and error records. Hosting and email providers may process IP addresses, request metadata and security logs to operate their services.

Purposes and choices

We use information to authenticate your store, calculate suggestions, create purchase orders, deliver requested emails, provide support, check your plan and maintain security. Where applicable, legal bases include contract performance, legal obligations and legitimate interests in operating and securing the service. Optional weekly digests require an affirmative choice in Settings and can be disabled there at any time.

We do not sell personal information, share it for cross-context behavioral advertising, or use it to train AI models. We do not add advertising pixels, session-replay tools or audience analytics to this website. See our cookie policy.

Merchant responsibilities

For store data handled on your instructions, you determine why it is processed and we provide the app service. We manage our own support, account administration and security records. Only enter supplier contacts you are authorized to use and give any notices required for your use. Contact us before using the app for processing that requires a separate data-processing agreement.

Who receives information

Shopify provides the platform, authentication, store APIs and subscription billing.
Railway hosts the app and its database.
Resend delivers purchase orders and enabled digests, including recipients and message content.
Cloudflare routes support email to our Google Gmail support inbox. These providers process support correspondence.
A supplier receives the purchase order and reply-to information when you authorize sending it; your configured store email receives a copy.

We may disclose information where legally required or necessary to address fraud, security incidents or legal claims. Providers may process information in the United States and other countries. We do not promise country-specific storage. International processing may require additional contractual safeguards; contact us before relying on a particular transfer arrangement.

Retention and deletion

Sales-line records are limited to a rolling 60-day window and pruned by scheduled maintenance. Store settings, catalog caches, supplier contacts and purchase orders are kept while needed to provide your installed app. You can remove supplier contacts in the app.

Completed sync and digest logs are pruned after 30 days. Customer-access requests retain a request number and relevant order identifiers until the merchant marks the request fulfilled or the store is deleted. After a customer-redaction request, a store-specific hash of each affected order identifier is kept for 61 days to prevent a later sync from restoring the deleted sales record. No customer contact profile is stored in that queue.

Uninstalling revokes app access. When the authenticated uninstall notification is processed, we delete the store's application database records. Shopify's shop-redaction notification also triggers deletion. Save purchase orders you need before uninstalling.

Database deletion does not recall emails already delivered. Provider backups, delivery logs, support correspondence and billing records may remain under provider retention schedules or where needed to resolve requests or satisfy legal obligations. Contact us for a deletion request covering these records as well.

Access, correction and other rights

Email support with your store domain and the nature of your request. We may verify your authority using limited information; do not send passwords, identity documents or complete billing statements. Depending on applicable law, you may have rights of access, correction, deletion, portability, restriction, objection and withdrawal of consent. We respond within the time required by applicable law and explain any lawful limitations. You may also complain to your relevant privacy regulator.

If you are a customer of a Shopify store, contact the merchant first so they can identify relevant orders. We assist with store-data requests and process Shopify customer-redaction notifications for the specified order records.

Security and children

We use HTTPS for the hosted app and authenticate access to merchant records. No service can guarantee absolute security. This is a business inventory tool, not a service directed to children under 13.

Changes

We update the date on this page when this policy changes. Where required, we will provide additional notice or obtain consent before using information for a new purpose.