Privacy Policy

InventoryLink is run by InventoryLink LLC ("we" or "us"), a small company in Connecticut. This page explains what the app keeps about you and your store, why it keeps it, and what you can ask us to do with it. If something here isn't clear, write to us at support@inventorylink.app and we'll get back to you.

For your account, we store your email address, your organization name and your password. The password is hashed by Supabase, which handles sign-in, so we never see it. If you use "Continue with Google", Google sends us your name and email address, nothing more.

If you use Shopify, your plan is billed through Shopify, on your store's Shopify bill. If you don't, you pay by card through Stripe, which handles your card details. Either way, your card details never reach us. What we keep is which plan you have, its trial and renewal dates, and whether it's active.

When you connect Shopify, you approve read access to your products, locations and inventory, plus permission to change inventory quantities. With that, the app stores your store name, your locations, product and variant names, SKUs, their IDs and stock counts. It doesn't ask for your orders or your customers' details, so it never has them.

Shopify gives the app an access token for your store. We encrypt it with AES-256-GCM before saving it.

Every time stock changes, Shopify or WooCommerce notify the app. We keep those notifications for 30 days, and a log of what the app did with each one. The log is what you see on the Sync Logs page, and it's how we track down the cause when a sync goes wrong.

If you create API keys, you see each key once. We only keep a hash of it and its last 4 characters, so you can tell your keys apart.

If you connect WooCommerce, your store gives the app a REST API key pair, which we encrypt the same way. WooCommerce doesn't offer narrower permissions, so that key could read your orders, but the app only uses it for products and stock. Your store also notifies the app about new and updated orders, so it knows which products sold. Those notifications include your customer's details; the app drops them on arrival and only keeps which products and how many, never names, addresses, emails or payment details.

If you add your own channel, the app stores its name, its webhook URL and a signing secret (encrypted, like the access tokens), plus the SKUs, product names and stock counts you import or send. It sends your SKUs and stock counts to that URL, and nowhere else.

Vercel, where the app is hosted, records basic request data such as IP addresses and browser type. We use it to fix bugs and block abuse. And if you email us, we keep the conversation.

Only to run InventoryLink: keeping your stock in sync, signing you in, knowing which plan you have, sending the emails the app needs to send (verification codes and password reset codes), keeping things secure and following the law.

We don't sell your information and we don't use it for ads. Your store data is used for your syncs and nothing else.

InventoryLink only sets cookies the app needs. One keeps you signed in. Another only lasts a few minutes while you connect Shopify, to make sure the connection request really came from you. If you pick a light or dark theme for the dashboard, a third one remembers that choice. There are no analytics or advertising cookies, which is why you won't see a cookie banner.

• Supabase: database and sign-in
• Vercel: hosting
• Shopify: billing for your plan, if your store uses Shopify
• Stripe: card payments for your plan, if it doesn't
• Resend: sends the app's emails
• Cloudflare: DNS and the support inbox
• Google: only if you use "Continue with Google"

Each of them only gets what it needs to do its part. Shopify and your WooCommerce store exchange data with the app because you connected them, and their own privacy policies cover that. Beyond this list, we would only share your information if the law required it, or if InventoryLink moved to a new owner. In that case this policy would keep applying to your data.

For as long as your account is open. When you disconnect a store, the app revokes its access on Shopify, or removes its webhooks from your WooCommerce store, and deletes that store's tokens and SKU mappings right away. WooCommerce can't let an app delete its own key, so revoke it yourself in WooCommerce → Settings → Advanced → REST API.

If you want your account deleted, email us and we'll do it. Your organization's data goes with it: connections, mappings, sync logs and API keys. Database backups roll over after a short time, so older copies disappear on their own. Billing records stay for as long as tax law requires.

Everything travels over HTTPS. Store tokens are encrypted, API keys are hashed, and the database only lets each organization see its own data. Nothing online is completely safe, but if a breach ever affected your data, we would tell you, as the law requires.

You can ask us whether we have personal information about you, and ask us to show it to you, correct it, delete it or send you a copy. Email support@inventorylink.app. We'll answer within 45 days, and usually much sooner.

If you live in Connecticut, the Connecticut Data Privacy Act gives you those rights, plus the right to opt out of the sale of your data, targeted advertising and profiling. InventoryLink doesn't do any of those things. If we turn down a request, you can appeal by replying to our answer, and if we turn down the appeal, you can contact the Connecticut Attorney General. People in other states and countries often have similar rights, and we'll respect them wherever the law says so.

InventoryLink is based in the United States. Your data is stored and processed here, and in other countries where the companies listed above operate.

InventoryLink is a tool for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their information.

When we change this policy, we'll update the date at the top. For bigger changes, we'll email you or show a notice in the dashboard before they apply.

InventoryLink LLC, Connecticut, United States. support@inventorylink.app

The rules for using the app are in the Terms of Service.