Privacy policy

This policy describes how MyWorks ("we", "us") collects, uses and protects information when you use the Stockroom app for Shopify, the Stockroom Network, or this website, stock-room.app. The short version, which the rest of this page spells out:

• We never sell your data. To anyone, for anything.
• Your business data is shared with exactly two kinds of recipients: the service providers that run the app (hosting, email delivery and similar), and - only with your explicit consent - suppliers you choose to connect with through Stockroom Network. A connected supplier receives only the purchase orders you send them - including where to ship them - and nothing else.
• Uninstalling the app removes our access immediately, and your operational data is deleted shortly after.

1. Information we collect

Store information. When you install the app, Shopify provides your store's name, myshopify domain, and contact email, and we store the access credential that lets the app work with your store (encrypted, always).

Catalog and inventory data from Shopify. The app reads your products, variants, locations and inventory levels - the data its features work on - and keeps a copy so the app is fast and doesn't call Shopify for every screen. Sales figures used in reports are stored as daily totals per product.

Data you put into the app. Suppliers and their contact details, purchase orders, costs, receipts, stocktakes, notes, settings, and files you attach to purchase orders.

Usage and diagnostic data. Which features are used and how (product analytics tied to your store, not to individuals), error and crash reports, and standard server logs.

Support conversations. If you contact support, we keep the conversation so we can help you over time.

Your customers' personal information: we don't collect it.Stockroom's features work on products, inventory and purchase orders. The app doesn't read or store your customers' names, addresses or other personal details.

This website is a static site. It has no accounts, no forms, and sets no advertising or cross-site tracking cookies.

2. How we use information

• To provide and operate the service - the app's features are the use.
• To send email you've asked the app to send, such as purchase orders to your suppliers and scheduled reports to you.
• To answer support requests and notify you about the service.
• To understand how features are used, fix problems, and improve the app.
• To keep the service secure and prevent abuse.

3. What we never do

• We never sell your data.
• We never share it with advertisers or data brokers.
• We never share one store's business data with another store - except through a Stockroom Network connection you explicitly consented to, scoped exactly as described below.

4. Stockroom Network: sharing you control

Stockroom Network connects two Shopify stores that both use Stockroom - a buyer and their supplier - so purchase orders can cross directly instead of traveling as a PDF. Nothing crosses until both sides have explicitly consented: the buyer when sending the invitation, the supplier when accepting it. The consent screen states exactly what will be shared, and if the scope of sharing ever expands, the connection requires fresh consent first - an old consent never silently covers new data.

What crosses (buyer to supplier): the purchase orders the buyer sends that supplier - line items, quantities, the buyer's costs on those orders, requested dates, and the order's ship-to address (the buyer's own location; or, when the buyer chooses to dropship an order, their customer's name, shipping address, and phone - the same delivery block that prints on the emailed purchase order PDF) - and the buyer's business contact details (store name and contact email) so the supplier can set them up as a customer.

What never crosses: the buyer's sales and stock levels, the buyer's other suppliers and their prices, customer data beyond the dropship ship-to the buyer explicitly chose to include, and the supplier's own costs. Purchase orders are shared only with the supplier they're addressed to - never with anyone else on the network.

Disconnecting: either side can disconnect at any time, immediately and unilaterally. Disconnecting stops anything new from crossing. It doesn't retract what already crossed - orders in the supplier's store and records on the buyer's purchase orders stay where they are, because they're that side's business records.

5. Information we receive from third parties

To power the app's "likely on Shopify" hints, we license a directory of Shopify store domains compiled from publicly available information. It contains store domains only - no private data about you or your suppliers - and it's matched against supplier email domains inside the app; nothing about your suppliers is sent out to build it.

6. Data retention and deletion

We keep your data for as long as the app is installed. When you uninstall, our access credential for your store is invalidated immediately. Shortly after (about 48 hours, via Shopify's standard redaction request), your operational data - suppliers, purchase orders, receipts, stocktakes, settings, uploaded files - is deleted.

We retain a minimal business record after deletion: your store's name, domain, install and uninstall dates, and an aggregate order-volume figure. This is kept as an ordinary business record; if you reinstall later, the app starts fresh.

7. Your rights

Depending on where you are, you may have rights to access, correct, export, delete or restrict the processing of your personal information (under laws such as the GDPR or CCPA/CPRA). Because you reach Stockroom through Shopify, data requests made through Shopify's standard privacy tooling reach us automatically and are honored. You can also contact us directly atsupport@myworks.software - we don't discriminate against anyone for exercising their rights.

8. Security

Data is encrypted in transit (TLS) and at rest. Store access credentials are additionally encrypted at the application level and never appear in logs or API responses. Uploaded files live in private storage accessible only to your store. The app requests the minimum Shopify permissions its features need, and every store's data is isolated from every other store's.

9. International transfers

The service is hosted in the United States. If you use it from elsewhere, your data is processed in the United States under this policy.

10. Children

The service is for businesses and isn't directed to children. We don't knowingly collect personal information from anyone under 16.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page, and for material changes we'll take reasonable steps to notify you - for example, a notice in the app. A material change to what crosses a Stockroom Network connection always requires fresh consent, not just an updated policy.

12. Contact

Questions about privacy or this policy:support@myworks.software.