Privacy Policy

SupplierSync: Stock & Oversell Guard

Last updated: July 13, 2026

1. What data we collect

When you install SupplierSync, we access the following Shopify data through the Shopify API with your explicit permission:

• Product data — product titles, variant barcodes (EAN/GTIN), and inventory policies to match supplier feeds and manage oversell settings.
• Inventory data — inventory levels at your locations to determine whether products are in your own stock or dropship-only.
• Location data — your store locations to correctly identify inventory sources.
• Shipping/delivery profiles — to move dropship products to extended delivery profiles when applicable.

We store supplier feed configurations (URLs, credentials, field mappings) and sync run logs (timestamps, match counts, error messages) in our database.

2. What data we do NOT collect

• We do not collect customer personal data (names, emails, addresses, payment info).
• We do not collect order data.
• We do not use cookies or tracking scripts in your storefront.
• We do not sell, share, or transfer any of your data to third parties.

3. How we use your data

Your data is used exclusively to:

• Match supplier EANs against your product barcodes
• Update oversell policies (CONTINUE/DENY) based on supplier availability
• Move variants between shipping profiles for accurate delivery estimates
• Display sync results and conflict reports in the app dashboard

4. Data storage and security

All data is stored on servers in Frankfurt, Germany (EU) hosted by Fly.io. Database connections are encrypted. Supplier feed credentials are stored encrypted at rest. We follow industry-standard security practices.

5. Data retention

Sync run logs are retained for 90 days. When you uninstall the app, all your data (supplier configurations, sync logs, plan information) is permanently deleted within 48 hours. You can also request immediate deletion by contacting us.

6. GDPR compliance

We comply with the EU General Data Protection Regulation (GDPR). Since we do not process customer personal data, there is typically no personal data to report or delete. We respond to all Shopify mandatory GDPR webhooks (data request, customer redact, shop redact).

7. Third-party services

The app connects to your supplier feed URLs as configured by you. We do not share your data with any other third-party services beyond what is required for the app's core functionality (Shopify API, your supplier feeds).

8. Contact

If you have questions about this privacy policy or want to request data deletion:

Labrigart UG (haftungsbeschränkt)
Email: support@labrigart.de
Website: labrigart.de