Privacy Policy

This Privacy Policy explains how Arvo: Back in Stock Alerts ("we", "us", "our") collects, uses, and protects information when a merchant installs our Shopify app and when a merchant's customers interact with the "Notify me when available" widget on the merchant's storefront.

1. Who this applies to

Arvo: Back in Stock Alerts is installed by Shopify merchants ("Merchant", "you") to offer back-in-stock notifications to their customers ("Customers"). This policy covers both the data we collect from Merchants (as the app's direct user) and the data we process on a Merchant's behalf about their Customers.

2. Information we collect

• Customer email addresses — collected when a Customer submits the "Notify me" form on a Merchant's storefront, so we can email them when the product variant they asked about is back in stock.
• Product and order data — product/variant titles, prices, images, and inventory levels (read via the Shopify Admin API) to determine when to send a notification, and order data to match a later purchase back to a waitlist signup for the Merchant's own revenue-recovery reporting.
• Shop information — the Merchant's shop domain, store name, and plan/billing status, to operate the app and its subscription features.

We do not collect names, addresses, phone numbers, or payment information from Customers.

3. How we use this information

• To send a Customer a restock notification email for the specific product/variant they signed up for.
• To let Merchants view their own waitlist, delivery history, and analytics inside the app dashboard.
• To attribute a completed order back to a restock notification, for the Merchant's own reporting.
• To operate billing/subscription features via Shopify's billing APIs.

We do not sell Customer or Merchant data to third parties, and we do not use it for advertising.

4. Data retention and deletion

We retain Customer email addresses only for as long as needed to fulfill a restock notification, plus a reasonable window for the Merchant's own reporting. When a Merchant uninstalls the app, or when Shopify sends us a mandatory compliance request, we act on it as follows:

• Customer data erasure request — we delete the specific Customer's waitlist, delivery, click-tracking, and revenue-attribution records for that store.
• Shop data erasure request (sent automatically ~48 hours after uninstall) — we delete all of that store's data from our systems.
• Customer data access request — we make the relevant records available to the Merchant (as the data controller) within the timeframe required by applicable law.

5. Data sharing

We share data only with the service providers necessary to operate the app: our hosting/database provider, and our transactional email provider (used solely to deliver restock notification emails). We do not share data with advertisers or data brokers.

6. Security

Data is transmitted over encrypted (HTTPS/TLS) connections. Access to stored data is restricted to the systems and personnel that operate the app.

7. Children's privacy

Arvo: Back in Stock Alerts is not directed at children, and we do not knowingly collect information from children.

8. Your rights

Customers who no longer wish to be contacted can request removal by contacting the Merchant's store directly, or by contacting us at the email below. Merchants can view and manage their own store's waitlist data at any time from within the app.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact us

Questions about this policy can be sent to [email protected].