Trust & data
Privacy Policy
Effective July 21, 2026
This Privacy Policy explains how StockLark (“StockLark,” “we,” or “us”) collects, uses, stores, and deletes information when a Shopify merchant installs or uses the StockLark application.
Information we process
We process only the information needed to provide the application:
- Shopify shop information, including the shop domain, installation status, granted access scopes, and authentication tokens.
- Authorized Shopify administrator information made available in the app session, such as user ID, name, email address, and locale.
- Product and inventory information requested from Shopify, including product and variant titles, SKUs, inventory items, locations, and available quantities.
- Information entered into StockLark, including suppliers, reorder rules, planning settings, purchase orders, notes, expected dates, and receiving quantities.
- Technical logs needed to operate and secure the service, such as timestamps, request paths, response status codes, and server errors.
How we use information
- Authenticate the shop and authorized administrators.
- Display current Shopify products, locations, and inventory.
- Calculate reorder suggestions and create purchase-order records.
- Provide support, diagnose errors, prevent abuse, and secure the service.
- Comply with legal obligations and Shopify platform requirements.
Legal basis and merchant instructions
We process information to provide the service requested by the merchant, to perform our agreement with the merchant, and where necessary for our legitimate interests in operating and protecting StockLark. Merchants are responsible for ensuring that information they enter into StockLark may lawfully be processed.
Service providers and international processing
Shopify provides the commerce platform, authentication, APIs, and app distribution services. StockLark currently uses Huawei Cloud infrastructure located in mainland China for application hosting and database storage. These providers process information only as needed to supply their services and under their respective terms.
If you use StockLark outside mainland China, your information will be transferred to and processed in mainland China. Data protection laws may differ from those in your location.
Retention and deletion
Live shop data is retained while StockLark is installed and as needed to provide the service. When Shopify notifies us that an app is uninstalled or a shop-redaction request is due, StockLark deletes the shop’s sessions, suppliers, reorder rules, and purchase orders. Rotating encrypted-access server backups are retained for up to 14 days before automatic deletion.
Security
We use HTTPS, restricted server accounts, access-controlled secret storage, authenticated Shopify webhooks, least-privilege API scopes, and scheduled backups. No internet service can guarantee absolute security.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your information. The shop owner can uninstall StockLark at any time. You can also submit a request using the contact address below. We may verify that a requester is authorized to act for the shop.
Cookies and tracking
StockLark uses Shopify’s embedded-app authentication and server-side sessions to operate the service. We do not use advertising trackers or sell information for targeted advertising.
Changes to this policy
We may update this policy as StockLark changes. The effective date at the top of this page identifies the current version.
Contact
Privacy questions or requests can be sent to footloosecloud@gmail.com.