Privacy policy
This describes exactly what levelin reads from your Shopify store, what it keeps, and how to have it erased. It is written against the database schema rather than from a template, so it is narrower than most policies of its kind.
Last updated
In short
- levelin holds no personal data about your customers. It never requests it and there is nowhere in its database to put it.
- It reads your products, inventory levels and order line items — which SKU, when, how many — because that is what forecasting demand requires.
- It requests read-only access. It cannot edit your products, your inventory, or your orders.
- Everything is deleted when you uninstall, and you can ask for erasure at any time.
- Nothing is sold, rented, or used to train a machine-learning model.
What we store
When you install levelin, it copies the following from your store into its own database so it can forecast without querying Shopify on every page load.
| Category | Fields |
|---|---|
| Store |
Your myshopify.com domain, when the app was installed and uninstalled,
and your app settings (forecast frequency and horizon, service level, dead-stock
threshold).
|
| Products | Product and variant identifiers, titles, product type, status, SKU and unit cost. |
| Inventory | Quantity available and quantity on order, per variant and per location identifier. |
| Orders | The order's Shopify identifier, when it was placed, whether it was cancelled, and per line: SKU, variant and quantity. No customer information of any kind — see below. |
| Suppliers | What you enter: supplier name, an optional contact detail, lead time, review period and minimum order quantity. If you type a person's name or email into the contact field, that is stored as you typed it; it is used only to label and address the purchase orders you export. |
| Forecasts | Computed output per SKU: demand pattern, chosen method, mean and variability, safety stock, reorder point, days of cover, suggested quantity and backtested accuracy. |
| Purchase orders | The drafts you create: supplier, status, and SKU, quantity and cost per line. |
| Billing | Your plan, subscription status, Shopify's charge identifier, and when your trial started, the subscription activated or was cancelled. We never see or store card details — Shopify bills you. |
| Staff session | For the Shopify staff account that installs the app: the access token Shopify issues, plus the account identifier, name, email and locale Shopify returns with it. This is the merchant staff member, not a shopper, and it is what keeps you signed in. |
| Webhook receipts | Shopify's event identifier, topic and arrival time for each webhook, so a message delivered twice is not processed twice. |
Your customers' data
levelin stores none of it. Not names, not email addresses, not shipping or billing addresses, not phone numbers, and no link from an order to the person who placed it.
This is not a policy commitment that a future release could quietly drop. It is a property of the software. The queries that read your orders select only the order identifier, its dates and its line items; they do not ask Shopify for the customer at all. And on every compliance request, the app inspects its own live database schema for any column that looks like customer data and refuses to proceed if it finds one, rather than reporting success on data it might be holding.
Consequently, when Shopify forwards a customer data request or a customer erasure request on your behalf, the honest and complete answer is that there is nothing to return and nothing to erase.
How it is used
The data above is used for exactly three things:
- Producing your forecasts, reorder points and purchase order drafts.
- Running the app itself: keeping you signed in, applying your settings, and billing your subscription through Shopify.
- Answering your support requests, when you contact us and we need to look at your data to help.
It is not used for advertising, sold or rented to anyone, combined with data from other stores, or used to train machine-learning models. The forecasting is statistical and runs on your store's data alone; nothing is pooled across merchants.
Who else sees it
We use a small number of infrastructure providers to run the service. They process data on our instructions only.
- Amazon Web Services — hosting for the application, the forecasting worker and the database.
- Shopify — the source of the data, and the processor of your subscription payment.
Nobody else. There is no analytics script, no advertising pixel and no session recorder on this site or inside the app. Both typefaces here are served from this domain — no page requests anything from another origin, and the build fails if one is added.
We will disclose data if legally compelled to, and we will tell you unless we are prohibited from doing so.
Retention and deletion
Your data is kept while the app is installed, because the app cannot forecast without it.
When you uninstall, Shopify sends us a shop redaction request 48 hours later. On receiving it we delete everything listed above: the store record and everything attached to it — products, variants, inventory, orders and their lines, suppliers, forecasts, purchase orders and your subscription record — together with the staff session, including the access token and the email address in it.
The 48-hour gap is Shopify's, not ours: it exists so an accidental uninstall can be reversed. If you would rather not wait, ask us and we will erase the store immediately.
Ordinary encrypted backups may hold a copy for up to 30 days after deletion, after which they expire. Backups are never used to restore data belonging to a store that has asked to be erased.
Your rights
Depending on where you are, you may have the right to access, correct, export, restrict or erase the data we hold, and to complain to a data protection authority. To exercise any of these, email meruappsdev@gmail.com. We will respond within 30 days and there is no charge.
Almost all of what we hold is your business's own commercial data, and you can export it from Shopify at any time. The only personal data involved is the staff account details attached to your session, and anything you chose to type into a supplier contact field.
Security
- All traffic is encrypted in transit over HTTPS.
- Every webhook Shopify sends is verified by HMAC signature before it is acted on, and rejected outright if the signature does not match.
- Every query is scoped to your store, so one merchant's data cannot be reached through another's session.
- The app requests read-only access to Shopify. Even if it were compromised, it holds no permission to change your products, inventory or orders.
No system is perfectly secure. If we discover a breach affecting your data we will notify you and the relevant authority as required by law.
Changes to this policy
If this policy changes materially — particularly if the app ever begins storing a category of data it does not store today — we will update the date at the top and notify installed merchants by email before the change takes effect. Continuing to use levelin after that constitutes acceptance.
Contact
Questions about this policy, or a request about your data: meruappsdev@gmail.com.