Privacy notice

Last updated: TODO

Who is responsible

Efficiencia provides the Service to merchants who install it in their own Shopify store. For the merchant’s account and the merchant’s own use of the Service, the merchant is the data controller and Efficiencia is a data processor acting on the merchant’s instructions. The merchant decides what to do with the store data the Service shows them; Efficiencia does not use it for its own purposes.

The registered legal entity responsible for the Service is TODO, and it can be reached at TODO.

What we process

Early-access signups. When you join the early-access list, we collect the email address you submit and a note that the request came from the marketing site. We do not collect your name, phone number, or store URL on the site.

Shopify sessions. Efficiencia has no separate account or sign-in. When you open the app in Shopify Admin, Shopify tells us which store and which staff member is using it, so we can scope your data to your store.

Shopify store connection. When you install the app, we store the shop domain, the granted API scopes, the installation time, and the encrypted access and refresh tokens we need to call Shopify on your behalf. Tokens are encrypted at rest and are never exposed to the browser. We also keep the status of your Efficiencia plan as Shopify reports it (whether it is active and when the free trial ends), and which setup steps you completed or skipped.

What we read from Shopify. The app only reads; it never changes your store. It asks for read access to orders, products, inventory, locations and fulfillments. From orders it reads the units sold per product variant over the last 60 days (cancelled and test orders are left out) and, for each order, its number, dates, payment and shipping status and fulfillments, to find orders that need attention. From products it reads titles, SKUs, the vendor and whether inventory is tracked. From inventory and locations it reads the stock available and incoming at each location, the stock locations themselves, and the cost per item. It also reads the shop’s name, owner email address and time zone, to address and time the emails below. Shopify also notifies us when an order, fulfillment or inventory level changes, and when the app is uninstalled; we use each notice only to learn which item to look at again, and we do not keep the notice itself.

What we store from your store. We keep only what the app needs to work between visits:

Supplier and purchasing data. The suppliers you confirm or create, the products they supply with the supplier’s SKU, cost, pack size, minimum order and delivery time, your reorder settings, fixed stock targets and chosen stock locations, and the supplier orders you mark as placed (supplier, date, and for each line the product, quantity, and the cost and product titles as they were). If you save a supplier order email address, we store it too. This is information about your business that you give us.

Sales and stock figures. For each product variant, the number of units sold in the last 60 days and the number of days that covers, and a daily snapshot of the stock available. These have no order IDs, customers or prices.

Orders that need attention. For orders that are not shipped, are shipped without a tracking number, or are only partly shipped: the order number and ID, status, dates and fulfillment IDs, with a short reason. We do not store the tracking numbers themselves. For products flagged by a stock alert, the product and variant title, supplier name, stock and days left.

Email settings. Whether the daily or weekly reorder digest and the stock alerts are on, and up to three recipient email addresses if you choose them. When someone follows the unsubscribe link in an email, we store only a keyed hash of their address, never the address, so we can honor it. We also record whether each digest was sent, without its content.

What we do not store. We do not store customer names, email addresses, phone numbers or addresses, order totals or line prices, payment details, or tracking numbers. Product titles, order numbers and supplier names do appear in the emails we send you, so treat those emails as business mail.

Why we process it

We use this information to provide and secure the Service: to verify your Shopify session, to connect to your Shopify store, to work out what to reorder from each supplier, to point out orders that need you, to send the reorder digest and stock alerts, to prevent abuse, and to send the early-access updates you requested. We do not sell personal data or use it for unrelated advertising.

Who processes it

We share data with service providers that process it on our behalf, only as needed to run the Service:

Shopify as the commerce platform the app runs in, and the source of the store data above. Formspree for early-access form submissions. TODO for application hosting and the managed PostgreSQL database, which hold everything listed under “What we store from your store”. TODO for sending the reorder digest and stock alert emails, which receive the recipient address and the message. We do not share data with anyone else except where the law requires it.

How long we keep it

Supplier and purchasing data, email settings and the setup progress are kept while the app is installed, until you change or delete them. The unit sales figures are recalculated every day and replace the previous ones. Daily stock snapshots are kept for 60 days. An order that needed attention is removed from the list when it is sorted out, and that resolved record is erased 90 days later. A stock alert record is removed when the product’s stock has recovered. Encrypted store tokens are kept until the merchant uninstalls the app.

When you uninstall the app, the encrypted tokens are erased at once, the plan status is deleted, and the app stops reading from your store and sending you email. The suppliers, settings and other records above stay, so that they are back if you install again. Shopify then sends us its shop erasure request, and when it arrives we delete the store and everything stored for it, unless you have installed the app again in the meantime. Early-access email addresses are kept until you ask us to remove them.

How we protect it

Data is encrypted in transit and at rest, including the managed PostgreSQL database and its backups. Store tokens are encrypted at rest with keys that can be rotated. Access to production data is limited to staff who need it and protected with multi-factor authentication. We keep test and production environments separate.

Your choices and rights

If you joined the early-access list, you can ask us to remove your email at any time. Merchants can uninstall the app from Shopify Admin, which erases the stored tokens as described above; to have the rest deleted sooner than Shopify’s erasure request, contact us. If you are a customer of a merchant that uses Efficiencia, the merchant is responsible for your request; we support Shopify’s customer data request and redaction webhooks and, because we store no customer personal data, there is nothing for us to disclose or erase. Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal data; contact us and we will help.

Changes

We may update this notice as the Service evolves. When we do, we will change the date at the top of this page.

Contact

Questions, requests, and complaints can be sent to the Efficiencia contact address, which is to be added here together with the registered legal entity.