Privacy policy for Fruity Stock: Inventory on Orders

Who is responsible

von Heugel Marketing GmbH, Am Tannenkamp 57, 26316 Varel, Germany. Managing director: Manuel von Heugel. Commercial register: HRB 223381, Amtsgericht Oldenburg.

Contact for all privacy questions: apps@fruity-software.de

What the app does

Fruity Stock adds a block to the order page in the Shopify admin. For every item of the order it shows the current inventory: available, on hand and committed, per location.

Data about the merchant and the store

When a store installs the app, our server stores a session for that store. It contains:

• the store's myshopify.com domain
• an access token issued by Shopify and the permissions the store granted
• technical fields of the session, such as its expiry time

We need this to call the Shopify Admin API for the store, for example to look up the store's ID for the subscription check. The legal basis is the performance of the contract with the merchant (Art. 6 (1) (b) GDPR). The session does not contain names or email addresses of staff members.

To find out whether a store has an active subscription, our server asks Shopify's Partner API. Shopify handles billing. We receive no payment details.

When the block or the app page is opened, the browser sends our server an ID token issued by Shopify. It names the store and the signed-in staff account by a numeric ID. The server checks the token and does not store it.

Data about orders and the store's customers

The block runs in the browser of the signed-in staff member, inside the Shopify admin. It asks Shopify directly for the order's line items (title, variant, SKU, quantities, product image) and for the inventory of these items per location. Shopify answers with the permissions of that staff member. The answer is shown in the block. It is not sent to our server and not stored by us.

The app holds the permission to read orders because line items belong to an order. The block does not read names, addresses, email addresses or phone numbers of customers. The app sets no cookies, uses no browser storage and contains no tracking.

Server and log files

The app page, the subscription check and the webhooks run on a server of Hetzner Online GmbH in Nuremberg, Germany. Hetzner acts on our behalf.

When a staff member opens the app page or an order with the block, their browser connects to this server. The server needs the IP address to answer the request. It does not write it to a log.

The log of the application records technical events: method, address and status of a request, the topic of a webhook and the store domain it belongs to, and errors. Our own pages load the Inter typeface from Shopify's content delivery network, which is the same network the Shopify admin uses.

Who receives data

We do not sell data and do not pass it on for advertising. Data is processed by:

• Hetzner Online GmbH, Germany, as hosting provider
• Shopify, as the platform the app is part of. Shopify processes store and customer data under its own terms and privacy policy.

How long data is kept

The session of a store is deleted when the app is uninstalled. Shopify also sends a request to erase a store's data 48 hours after uninstallation. On that request we delete any session that is left.

Shopify's privacy requests

Shopify forwards requests to view or erase a customer's data to every installed app. Because the app stores no customer or order data on our server, there is nothing to hand over or to delete for a customer. We confirm the request to Shopify.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. To use these rights, write to apps@fruity-software.de.

You can lodge a complaint with a supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

Customers of a store should contact the merchant first. The merchant is responsible for the data in their store.

Changes

If the app starts to process other data, we update this policy before the change goes live.