Privacy Policy

Ghost Stock Killer (“we”, “us”, or “our”) is committed to protecting the privacy of merchants who install and use our Shopify app (“you” or “your”). This Privacy Policy explains what data we collect, how we use it, and your rights under applicable laws.

1. Information We Collect

• Shop identifier (e.g. ghost-app.myshopify.com)
• Access token (encrypted at rest)
• Inventory metadata (product IDs, quantities, thresholds)
• Alert settings (low-stock rules, notification preferences)
• Optional Slack webhook URL and notification email

We do not collect payment information, customer data, or personally identifiable information beyond what Shopify provides.

2. How We Use Your Data

• Authenticate your store via Shopify OAuth
• Monitor inventory levels and trigger alerts
• Send notifications via email or Slack
• Register mandatory Shopify compliance webhooks
• Improve app performance and reliability

3. Data Storage & Security

All data is stored securely using industry-standard encryption. Access tokens are encrypted at rest. Our infrastructure is hosted on Vercel and Supabase, with strict access controls and audit logging.

4. Data Retention

We retain your data only as long as your store is connected to Ghost Stock Killer. If you uninstall the app, your access token is revoked and your store record is deleted within 30 days.

5. Data Deletion & GDPR Compliance

You may request data deletion at any time by contacting support at support@ghost-stock.co.uk or using Shopify’s GDPR API endpoints.

6. Third-Party Services

Ghost Stock Killer integrates with Shopify (OAuth, inventory API, webhook registration), Brevo (email delivery), and Slack (optional webhook alerts). These services may process data according to their own privacy policies.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date.