Privacy policy

Vendorwise is a Shopify app that shows merchants what to reorder from each vendor, based on their stock levels and recent sales. This policy explains what data the app reads, what it keeps, and how it is deleted.

Vendorwise is developed and operated by Bin Rozenblum ("we"). For anything in this policy, write to support@binrozenblum.co.il.

What the app reads from your store

Vendorwise asks Shopify for four read-only permissions: products, inventory, locations and orders. It cannot change anything in your store. It reads:

• for active products that track inventory: product and variant title, SKU, vendor and cost per item;
• the available and incoming quantity of each variant at each location, and the location names;
• from orders placed in the last 60 days: the order date, whether it was cancelled, and for each line item only the variant and its current quantity.

Vendorwise does not request customer names, email addresses, phone numbers, shipping or billing addresses, order notes or payment details.

The app also reads basic store details: store name, domain, timezone, currency and your Vendorwise plan.

How the data is used

Only to provide the app's features to you: the reorder list, the print view and the CSV export. We do not use store data for advertising, for building profiles, or to train any model, and we do not combine it with data from other stores.

What we store, and for how long

• Product and stock snapshot: for each tracked variant, the fields listed above, its stock per location and the number of units sold in the last 7, 14, 30 and 60 days. It is replaced by a fresh copy every morning and whenever you refresh the data.
• Orders are not stored. Order lines are read during the refresh, added up into units sold per variant, and discarded. No order numbers or order IDs are kept.
• Your settings: lead times and safety stock per vendor, the defaults you choose, your store name, timezone, currency and last known plan.
• Shopify access token: the credential Shopify issues when you install the app, needed to read your store data on your behalf.
• Server logs: technical logs record the store domain, the time and the type of request or error. Web server access logs are deleted after 14 days.

Everything above is kept while Vendorwise is installed and is deleted as soon as you uninstall it.

Print and CSV

The print view and the CSV file open from links that are signed for your store and expire after 2 hours. Once you print or download the list, that copy is under your control.

Who we share data with

We do not sell, rent or trade any data. We share data only with the service providers that run the app, and only as needed:

• Shopify, the platform the app runs on, which also handles billing.
• DigitalOcean, which hosts the app server and its database in Frankfurt, Germany.

We may disclose data if the law requires it, and we will tell you unless we are not allowed to.

Deletion and privacy requests

• Uninstalling Vendorwise deletes your snapshot, settings and access token right away.
• Shopify's shop data erasure request, sent 48 hours after you uninstall, deletes anything that is left.
• Shopify's customer data request and customer data erasure requests: Vendorwise stores no customer data, so there is nothing to report or delete.

As a merchant, you can ask us at any time to access, correct or delete the data we hold about your store, including under the GDPR or the CCPA. We answer within 30 days.

Security

All traffic is encrypted with HTTPS. The app has read-only access to your store. The database is not reachable from the internet, and access to the server is limited to the developer. If a security incident ever affects your data, we will tell you and Shopify without undue delay.

Changes to this policy

If we change how Vendorwise handles data, we will update this page and its date. For significant changes we will tell you in the app before they take effect.

Contact

Questions, requests or complaints: support@binrozenblum.co.il.

See also the Terms of service.