Privacy Policy

This Privacy Policy explains how Verluno Labs ("Verluno Labs", "we", "us", or "our") processes information when a Shopify merchant installs or uses ReorderPilot (the "App").

1. Information we process

Shopify store and inventory information

ReorderPilot processes information provided through Shopify APIs that is necessary to operate the App, including:

• Shop and Shopify resource identifiers.
• Products, variants, SKUs, product status, and inventory quantities.
• Inventory item and Shopify location identifiers.
• Product creation and update timestamps where needed for inventory planning.

Limited order information

To calculate demand, sales velocity, inventory forecasts, and reorder recommendations, ReorderPilot requests limited recent order information from Shopify.

This processing is limited to information such as:

• Shopify order identifiers.
• Order creation dates.
• Whether an order was cancelled.
• Line-item quantities.
• Shopify product-variant identifiers associated with those line items.

ReorderPilot does not request customer name, email, phone, or shipping or billing address fields for this forecasting purpose.

Order-level forecasting information is processed when the forecast is calculated and is not stored by ReorderPilot as a customer or Shopify-order database.

Information entered by merchants

Merchants may provide and store operational information in ReorderPilot, including:

• Business and contact information.
• Supplier names, contacts, addresses, email addresses, phone numbers, and notes.
• Inventory-planning settings such as lead time, safety stock, minimum order quantities, case packs, and reorder cycles.
• Purchase orders, expected dates, quantities, costs, receiving locations, and notes.

Authentication and merchant-user information

Shopify may provide information about the merchant user who authorizes or uses the App, such as a user identifier, name, email address, locale, account-owner status, and authorization scopes. ReorderPilot uses this information for authentication, authorization, security, and operation of the App.

Compliance webhook information

Shopify privacy-law webhooks can contain customer identifiers. ReorderPilot authenticates these requests and performs the required privacy action. The App does not intentionally log or persist the customer-identifying contents of these webhook payloads.

2. How we use information

ReorderPilot processes information only as reasonably necessary to:

• Calculate inventory demand and sales velocity.
• Generate inventory forecasts and reorder recommendations.
• Maintain product and inventory synchronization.
• Create, send, track, receive, and manage purchase orders.
• Apply merchant-defined inventory-planning settings.
• Authenticate users and protect the App.
• Diagnose errors, maintain reliability, and provide merchant support.
• Comply with Shopify privacy and data-deletion requests and applicable law.

We do not sell customer personal data, and we do not use protected Shopify customer data for advertising or unrelated customer profiling.

3. Service providers

We may use service providers necessary to operate ReorderPilot, such as Shopify, application hosting and database infrastructure providers, and transactional email-delivery providers.

These providers are used only as needed to deliver or support the App. ReorderPilot does not intentionally provide protected Shopify customer identity fields to its supplier-email delivery provider.

4. Data retention

Protected Shopify order information used for forecasting is processed when needed and is not retained by ReorderPilot as a customer or order history database.

Merchant configuration, supplier, catalog, inventory-planning, and purchase-order data may be retained while the merchant uses ReorderPilot so that the App can provide its services.

When Shopify sends a valid shop-redaction request after uninstall, ReorderPilot deletes the merchant's stored ReorderPilot data associated with that shop. Authentication sessions are also removed when the App is uninstalled.

5. Customer privacy requests

Shopify merchants may receive privacy requests from their customers. ReorderPilot supports Shopify's mandatory customer data-request and customer-redaction processes.

Because ReorderPilot does not maintain customer-specific profiles or stored Shopify order records, there is generally no customer-specific ReorderPilot record to return or erase. We nevertheless process authenticated Shopify compliance requests as required.

6. Security

ReorderPilot is designed to minimize protected customer data processing. Shopify API communications are transmitted using encrypted HTTPS/TLS connections. Access to merchant data is limited to authenticated app operations and service components that require it.

Production infrastructure handling persistent application data must use encryption at rest and appropriate access controls. Protected Shopify order data used for forecasting is not persisted in ReorderPilot's application database.

7. International processing

ReorderPilot and its service providers may process information in jurisdictions other than the merchant's or customer's jurisdiction where necessary to provide the App. Applicable contractual, privacy, and data-protection safeguards are used where required.

8. Changes to this policy

We may update this Privacy Policy as ReorderPilot changes or as legal, security, or Shopify requirements change. The effective date above identifies the current version.

9. Contact

Privacy and data-protection questions may be directed to Verluno Labs through the developer/support contact identified for ReorderPilot in its Shopify App Store listing.