Privacy Policy

Keystone Inventory (“the app”, “we”, “us”) is a Shopify app provided by Keystone Solutions. This policy explains what data the app accesses, how it is used, and your rights. By installing the app you agree to this policy.

Information we access

When you install Keystone Inventory, the app accesses the following data from your Shopify store through the Admin API, using only the permissions you approve at install:

• Product and variant data — titles, SKUs, barcodes, prices, images
• Inventory levels and store locations
• Order data — line-item quantities, totals and refunds, used to calculate sales velocity, forecasts and reports

The app reads order quantities and values only. It does not access or store customer personal information such as names, email addresses, shipping or billing addresses, or payment details.

How we use your data

Data is used solely to provide the app’s features: demand forecasting, replenishment suggestions, purchase orders, supplier and bundle management, and inventory/sales reporting. It is processed to display these insights to you within the app.

Data we store

To operate the app we store, in a secure database:

• Your planning settings — suppliers, per-product settings (cost, lead time, pack size, etc.), purchase orders, bundle definitions and forecast defaults
• Your Shopify access token, used to call the Admin API on your behalf, stored securely

We do not store any Shopify customer personal data.

Where data is stored

App data is hosted on Supabase (PostgreSQL) and the application runs on Fly.io, in UK/EU data regions. These are our sub-processors and process data on our behalf under their respective terms and security controls.

Sharing

We do not sell, rent or share your data with third parties for marketing. Data is shared only with the sub-processors named above, and only as needed to operate the service.

Retention and deletion

• When you uninstall the app, we delete your app data in response to Shopify’s shop data-erasure (shop/redact) webhook.
• As we hold no customer personal data, Shopify’s customer data-request and customer-redact webhooks are acknowledged with nothing to return.
• You may request deletion of your data at any time by contacting us.

Security

Access tokens and app data are protected with access controls; database access is restricted to the application. All connections use HTTPS/TLS.

Your rights

Depending on your jurisdiction (including UK GDPR and EU GDPR), you may have the right to access, correct or delete your data. Contact us to exercise these rights.

Contact

Keystone Solutions
Email: support@keystone-solutions.uk

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version.