Privacy Policy for the Shopify App: Viking Warehouse Stock BI

1. A Note on Individual Customer Privacy (PII)

Unlike many applications, the app does not collect, track, or store any Personal Personally Identifiable Information (PII) belonging to your customers. We do not sync buyer names, email addresses, phone numbers, or physical shipping addresses.

Our systems are built to analyze purely operational, aggregate inventory and order patterns to provide you with forecasting and intelligent decision-making utilities.

2. Information We Collect from Your Store

To provide our forecasting, sales velocity, and inventory planning services, the App accesses and processes operational data from your Shopify store via Shopify's APIs. This includes the following data fields:

• Order and Sales History Metadata: We process historical and incoming order parameters including Order ID (order_id), timestamp of the transaction (ordered_at), product identifiers (sku_id, ean_code), quantity purchased (quantity), order channel or origin (source, e.g., Shopify, Amazon), and physical characteristics (weight_kg).
• Inventory & Product Snapshots: We process current and historical stock data including product inventory levels (stock_level), stock update dates (date), product or variant naming (sku_name), product classification (category), unit costs or pricing (unit_price), supplier lead times (lead_time_days), and barcodes (ean_code).
• Shop Owner Details: We collect the primary merchant email, shop name, shop domain, and shop country to manage your account registration, communication, and billing securely through Shopify.

3. How We Use Your Information

We use the collected store and inventory data strictly to provide, maintain, and optimize the App's core functionality:

• Intelligent Inventory Insights: To calculate historical sales velocity, predict future demand, flag low-stock thresholds, and provide intelligent reorder recommendations based on your custom supplier lead times (lead_time_days).
• Multi-Channel Analysis: To segment and compare your fulfillment patterns between native Shopify sales and external sales channels (source).
• Operational Performance: To track categorical performance (category) and product margins (unit_price).
• Customer Support: To troubleshoot performance issues or bugs specific to your app dashboard.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your merchant or store data to any third parties. We only share information with third-party service providers (sub-processors) to the minimum extent necessary to host and run the App:

• Cloud Infrastructure Providers: Secure database hosting and server infrastructure (Supabase) located in European Union.
• Shopify Core APIs: Data is shared directly with Shopify to manage billing and fulfill application protocols.
• Legal Compliance: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Data Retention and Shopify Deletion Webhooks

We retain your store data only for as long as your store utilizes the App to continuously deliver analytical reports.

App Uninstallation (shop/redact): If you uninstall the App from your Shopify store admin, Shopify triggers an automated shop/redact webhook. In strict compliance with Shopify's data protection rules, we will completely wipe all of your store's order history and inventory data from our databases within 48 hours of uninstallation.

Customer Data Inquiries: Because our app filters out and never stores customer data (e.g., customer names/emails), requests via Shopify's customers/data_request or customers/redact webhooks will automatically return an immediate acknowledgment confirming that no customer PII is stored on our systems.

6. Data Security

The security of your operational store data is critical to us. We implement industry-standard administrative, technical, and physical security practices to prevent unauthorized access, alteration, or destruction of your information. This includes encrypted connections (HTTPS) for all data transfers and strictly secured backend environments.

7. International Data Transfers (GDPR & CCPA Compliance)

If you are operating your store within the European Economic Area (EEA) or the United Kingdom, or serve customers in California (CCPA), please note that your operational store data may be transferred to and processed outside of your jurisdiction. We ensure that appropriate safeguards are in place with our hosting providers to comply with regional data security frameworks.

As a merchant, you have the right to request access to, correction of, or deletion of the administrative profile data we hold about your business (such as your account email).

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by updating the "Last Updated" date at the top of this page.

9. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to exercise any data rights, please contact us by email at:

hello@vikingbi.com