Privacy policy

Overview

ClearShelf (“ClearShelf,” “we,” “us”) is a Shopify-embedded application that helps merchants identify and automatically act on dead stock and slow-moving inventory. This policy explains what data we collect when you install ClearShelf on your Shopify store, why we collect it, and the choices and rights available to you.

By installing ClearShelf, you agree to the collection and use of information as described in this policy and in our Terms of Service.

Information we collect

When you install ClearShelf, Shopify grants us access to certain store data through the Shopify Admin API, scoped to what the app needs to function. We collect:

• Store information: shop domain, store name, currency, and time zone.
• Product data: product titles, variants, SKUs, prices, inventory levels, vendor, tags, and product status.
• Order data: order line items, quantities, and timestamps used to calculate sell-through rate, GMROI, and days-since-last-sale. We do not request access to full customer order history beyond what is needed for these calculations.
• Account contact information: the email address associated with your Shopify account, used for billing receipts, product notifications, and support.
• App usage data: the segments, workflows, and actions you configure inside ClearShelf, and a log of when workflows run and what they changed.
• Technical data: standard server logs (IP address, browser type, request timestamps) for security and debugging.

We do not request or store payment card details — all subscription billing is handled directly by Shopify’s Billing API.

How we use information

We use the information we collect to:

• Sync your product and order data so dead stock metrics stay accurate
• Evaluate the segments you define and run the workflows you create
• Execute the actions you configure — price markdowns, tagging, archiving, and email digests
• Send transactional emails, such as digest summaries you’ve scheduled or billing receipts
• Provide customer support when you contact us
• Monitor, debug, and improve the reliability of the app
• Comply with our legal obligations, including those under Shopify’s Partner Program Agreement

We do not sell, rent, or use your store’s product, order, or customer data for advertising purposes.

How we share information

We share data only with the service providers that power ClearShelf’s infrastructure, each bound by their own data protection obligations:

• Railway — hosts our application servers, background workers, and PostgreSQL database
• Redis (hosted on Railway) — powers our background job queue for syncs and workflow execution
• Resend — delivers transactional emails such as scheduled digests and account notifications
• Shopify — processes subscription billing on our behalf via the Shopify Billing API

We do not share your data with any other third party except where required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of ClearShelf, our merchants, or others.

Data retention

We retain store data for as long as your ClearShelf subscription is active, so that metrics, segments, and workflow history remain accurate. If you uninstall ClearShelf, we retain a copy of your data for a limited period in case you reinstall, after which it is deleted in line with the deletion process described below and Shopify’s 48-hour mandatory data deletion webhook requirements.

Security

We apply industry-standard safeguards to protect your data, including encrypted connections (TLS) for all data in transit, access controls limiting which systems and personnel can reach production data, and cryptographic verification (HMAC-SHA256) of every webhook request to confirm it genuinely originates from Shopify. No method of transmission or storage is 100% secure, but we work to use commercially acceptable means to protect your information.

GDPR & your rights

If you or your customers are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation, including the right to access, correct, export, or request deletion of personal data we hold. Because ClearShelf operates on your behalf as a data processor for your store’s information, most customer-level requests should be directed to you as the data controller; we will assist you in fulfilling them. For requests about ClearShelf’s own records (such as your merchant account contact details), email privacy@clearshelfapp.com.

Mandatory compliance webhooks

As required by Shopify for all public apps, ClearShelf implements the three mandatory GDPR webhooks:

• customers/data_request — notifies us when a store owner requests a copy of a customer’s data that we may hold
• customers/redact — notifies us to delete a specific customer’s data when requested
• shop/redact — notifies us to delete all of a shop’s data 48 hours after the app is uninstalled

Every incoming webhook is verified against your shop’s secret using HMAC-SHA256 before any data is read or written.

What happens when you uninstall

When you uninstall ClearShelf, we immediately stop syncing new data from your store. In line with Shopify’s shop/redact webhook, your store’s product data, segments, workflows, and action history are scheduled for deletion from our systems. Billing is cancelled automatically through Shopify and no further charges occur.

Cookies

The ClearShelf app, embedded inside the Shopify Admin, uses session storage and minimal first-party cookies required to keep you securely signed in via Shopify App Bridge. This marketing website uses no advertising or tracking cookies.

Children’s privacy

ClearShelf is intended for use by Shopify merchants and is not directed at children. We do not knowingly collect personal information from children under 16.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version on this page with a revised “last updated” date, and for material changes we will notify active merchants by email.

Contact us

If you have questions about this policy or how we handle your data, contact us at privacy@clearshelfapp.com or through our contact page.