Privacy Policy

Reorderly is operated by datadir s. r. o., Bauerova 1205/7, 040 23 Košice, Slovakia (company ID / IČO 57 582 904). We are the data controller for your account data — your store domain, contact name and email, and plan/billing status — and a data processor for the store data we handle on your behalf, including the supplier and notification contact details you enter. For any privacy question, contact us at hello@datadir.co.

Reorderly requests only the Shopify scopes it needs to do its job:

• Products & variants (read_products) — titles, SKUs, variant IDs, and unit costs, to identify what you stock.
• Inventory levels (read_inventory) — on-hand and available quantities per location, and their changes over time, to compute sales velocity and reorder points.
• Locations (read_locations) — your location names and IDs, to report stock per location.
• Orders (read_orders) — we read new and recent orders to compute real sales velocity and dead-stock. Shopify delivers the full order to us, but we extract and store only the line items (variant, quantity, price and line revenue) and immediately discard everything else — we never store the customer's name, email, phone, or address. Our order history is limited to roughly the last 60 days.
• Write inventory (write_inventory) — to adjust on-hand quantities when you receive a purchase order, transfer stock between locations, or reconcile a stocktake.
• Write products (write_products) — to change a variant's price when you apply a dead-stock markdown. Every price change is a reversible, audited change set you can roll back.

Under Shopify's Protected Customer Data policy, reading orders is Level 1 access. We minimise it: we do not request the protected customer fields (name, email, phone, address) and we store no customer personal data — only the aggregate product movement above.

• Your store's .myshopify.com domain and an offline access token, so the app can sync in the background.
• An inventory ledger we derive from inventory-level changes (per-variant stock movements over time).
• Aggregate sales records derived from your orders: per line item, the variant, quantity, price and revenue, and when it sold — no customer identifiers.
• Settings and records you create in the app: unit costs, reorder points, purchase orders, stocktakes, kits, currency, and VAT preferences.
• Supplier contact details you enter (name, email, optional phone), used to draft and email purchase orders, and an optional notification email address for the weekly digest.

None of this contains personal data about your customers. The only personal data here is the supplier and notification contact details you choose to enter, which we process on your behalf to send the purchase orders and digests you ask for.

We use the data solely to provide the service to you — reorder suggestions, sales velocity, purchase-order drafts, dead-stock / trapped-cash analysis, (when you choose) reversible markdown pricing, and (when you enable it) emailing purchase orders to your suppliers and a weekly digest to you. We do not sell your data, use it for advertising, or share it with third parties except the infrastructure providers below. We do not use it for any automated decision that has a legal or similarly significant effect on any individual.

We use a small number of infrastructure providers, all in the EU/EEA:

• Shopify — the platform your store and our app run on (the source of the store data we process, under Shopify's own DPA).
• Hetzner Online GmbH (Germany, EU) — application hosting and database.
• Scaleway SAS (France, EU) — encrypted, off-site database backups.
• Bunny.net (BunnyWay d.o.o., Slovenia, EU) — authoritative DNS for our domain.
• Transactional email relay (an EU/EEA SMTP provider) — used only when you email purchase orders to suppliers or turn on the weekly digest; it processes the recipient email address to deliver that message. If you never enable emailing, no email data leaves our systems.

When you uninstall the app, Shopify notifies us and we delete your access token immediately. About 48 hours after uninstall, Shopify sends a shop/redact request, and we erase all remaining data for your store — the ledger, aggregate sales, settings, suppliers, purchase orders, stocktakes, and kits. Encrypted backups roll off on a 30-day cycle. You can request deletion at any time by emailing hello@datadir.co. We also honour Shopify's customers/data_request and customers/redact webhooks; because we store no customer personal data, there is nothing for us to return or erase in response to them. Tamper-evident audit-log entries are kept for the account's lifetime and then deleted or irreversibly anonymised within 12 months of termination.

Note: a shared product/inventory catalogue mirror (containing no customer personal data) is used across our apps; if you run another datadir app it is retained until you uninstall the last one, then purged.

Data is encrypted in transit (TLS) and backups are encrypted at rest. Each store's data is isolated at the database layer with row-level security, so one store can never read another's. Access to production systems is restricted, on a least-privilege basis, to the operator of the service. Access tokens are stored server-side and never exposed to the browser.

If you are in the EEA/UK, you have the right to access, correct, export, or delete the data we hold, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Slovakia, the Úrad na ochranu osobných údajov SR). Our lawful basis for processing your account and store data is the performance of our contract with you. To exercise any right, contact hello@datadir.co; we respond within one month.

All personal data is stored in the European Union — application and database on Hetzner (Germany) and encrypted backups on Scaleway (France). Any purchase-order or digest emails you enable are sent through an EU/EEA email relay. We do not transfer personal data to a third country except to Shopify, which processes under its own DPA and adequacy/Standard Contractual Clauses.

We may update this policy as the app evolves. Material changes will be posted here with a new “last updated” date.