Privacy Policy

Dead Stock Detective · Last updated 9 June 2026

Dead Stock Detective (“the app”, “we”) is a read-only inventory analytics app for Shopify. It identifies slow-moving and dormant stock and the capital tied up in it, and recommends an action for each SKU. This policy explains what data we access, how we use it, and how it is stored and deleted.

Data we access

With your permission, we read the following from your Shopify store through Shopify’s Admin API. The app is read-only — it never creates, edits, or deletes your products, orders, or inventory.

• Products and variants (title, SKU, price, cost, image, created date)
• Inventory levels and locations
• Order line items — the variant sold, quantity, and processed date

Data we store

• Derived metrics: per-SKU dormancy, trapped capital, ageing, velocity, and the recommended action — computed from the data above.
• Short-lived sale records: for each ingested order line we keep only the variant reference, quantity, sale date, and the Shopify order/line identifiers. These are pruned automatically after 90 days.
• Your settings: dormancy thresholds, excluded SKUs/locations, digest preferences, and plan.

We do not collect or store customer personal data. We never read or retain customer names, email addresses, phone numbers, shipping/billing addresses, or payment information. We only use order data in aggregate to date when a product last sold.

How we use it

Solely to provide the app’s features to you: computing your dead-stock dashboard and recommendations, and — if you enable it — sending you a weekly email summary. We do not sell your data or use it for advertising.

Storage, security & subprocessors

Data is stored in the United States and transmitted over TLS. Shopify access tokens are encrypted at rest. We rely on the following subprocessors: Shopify (platform), Vercel (hosting), Supabase (database), and an email provider for the optional digest.

Retention & deletion

Raw sale records are pruned after 90 days. When you uninstall the app, all of your store’s data is deleted from our systems in response to Shopify’s shop/redact webhook (sent ~48 hours after uninstall). You can also request deletion at any time using the contact below.

GDPR & CCPA

Because we hold no customer personal data, Shopify’s mandatory customers/data_request and customers/redact webhooks are acknowledged with confirmation that we store no personal data for the customer in question. Store-level data is removed via shop/redact as described above.

Changes

We may update this policy; the “last updated” date above reflects the latest version. Material changes will be communicated through the app.

Contact

Questions or data requests: support@harbourlabs.app.