Privacy Policy

Last updated: 12 August 2026

Brimstock (“the App”, “we”, “us”) is a Shopify app provided by Floors Apps. It helps merchants forecast when to reorder inventory. This policy explains what data the App accesses, why, how we protect it, and the choices you have.

1. Who this policy is for

This policy applies to Shopify merchants who install the App and to the store data the App processes on their behalf. For a merchant’s own customers, the merchant is the data controller; we act as a data processor on the merchant’s instructions (see “Our role”, below).

2. What data we access and store

The App reads the minimum data needed to produce a forecast:

• Store & account: your shop domain and the access token issued by Shopify (used to call the Shopify Admin API on your behalf), plus any settings you configure in the App (lead time, order quantities, cost inputs).
• Order data: we read order line-item quantities, product variant IDs, order and refund dates, and refunded quantities.
• Product & inventory data: variant IDs, SKUs, product titles, prices, available inventory, and collections.

What we store: we persist only aggregated weekly sales quantities per product variant (a number of units per week), together with your settings. We do not store customer names, email addresses, phone numbers, shipping/billing addresses, or payment details.

3. Protected customer data

Producing a sales forecast requires reading the Shopify Order object, which Shopify classifies as protected customer data. We access it solely for store management (inventory forecasting and reorder recommendations). We apply data minimization: we do not request or store the protected customer fields (name, email, phone, address). We honor Shopify’s mandatory privacy webhooks, including data-erasure requests.

4. Why we process this data (purpose & legal basis)

We use the data only to calculate demand forecasts, safety stock, and reorder timing, and to display and export those results to you. The legal bases are performance of our contract with you (providing the App) and our legitimate interest in operating and improving the service. We do not sell your data or your customers’ data, and we do not use it for advertising.

5. Where data is stored and how it is protected

Data is hosted on Fly.io in Amsterdam, in the European Union. It is encrypted in transit (TLS/HTTPS) and encrypted at rest. Access tokens are stored so that only the App can use them, and access is limited to what is necessary to operate the service.

6. Data retention and deletion

We keep aggregated weekly demand and your settings only while the App is installed. When you uninstall the App, or when Shopify sends a shop-redaction request, we delete all data we hold for your store. You can also request deletion at any time by emailing us.

7. Sub-processors

• Shopify — the platform the App runs on and the source of the store data.
• Fly.io — cloud hosting and database storage (EU region).

8. Our role (controller vs. processor)

For personal data contained in your store’s orders, you (the merchant) are the controller and we are the processor: we process it only to provide the App, on your instructions, and we assist you in responding to data-subject requests. For the limited account data we need to run the service (shop domain, tokens), we act as controller.

9. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. To exercise any right, contact us at the address below. Shopify’s automated data-request and redaction webhooks are also supported.

10. Changes to this policy

We may update this policy as the App evolves. Material changes will be reflected by updating the “Last updated” date above.

11. Contact

Questions or requests: floorsapps@gmail.com (Floors Apps).

This App is governed by the laws of the Netherlands. See also our Terms of Service.