NeuraOrderNeuraOrder Privacy Policy
NeuraOrder ("the App") forecasts product demand and recommends reorder quantities for merchants who install it on their Shopify store. This policy explains what information the App reads, how it is used, and how it is deleted.
Information the App collects
When you install NeuraOrder, the App reads the following through Shopify's Admin API, using read-only access:
| Data | What we store |
|---|---|
| Store details | Shop name, myshopify domain, currency, time zone and country. |
| Products | Product and variant titles, SKUs, vendor, product image URL, price and unit cost. |
| Inventory | Available, committed and incoming quantities per location. |
| Orders | Order IDs, order dates, cancellation status, and line items (SKU, variant and quantity), plus refund and return quantities. These are used only to measure how much of each product sold on each day. |
| Your settings | Supplier lead times, reorder frequency, minimum order and case pack, storage limits, shelf life, supplier prices and the cost settings that you enter in the App. |
| Suppliers and purchase orders | Supplier names and the contact details you enter (contact name, email, phone, address, notes), your buyer details (name, email, ship-to address), and the purchase orders you create. Contact details are encrypted by the App before they are stored. |
| Plan | Your NeuraOrder plan and its status. Billing is handled by Shopify; we never receive payment card details. |
The App does not collect or store customer personal information. It never requests customer names, email addresses, phone numbers, shipping or billing addresses, or payment details, and it removes such fields from any webhook payload before storing it.
How the information is used
- To produce demand forecasts, stockout-risk estimates and reorder recommendations for your store only.
- To keep your forecasts current: the App syncs with Shopify daily and when you ask it to.
- To operate, secure and troubleshoot the service.
We do not sell your data. We do not share it with third parties for advertising. We do not use one merchant's data to build forecasts for another merchant. We never use your data to train or improve artificial-intelligence or machine-learning models, ours or anyone else's. Forecasts are computed on our own servers with pretrained, open-source AI models; your data is never sent to an AI provider.
Our website
When you join the early-access list or send us a message on neuraorder.com, we store the email address, name, store address, catalog size and message you choose to give. We use them only to reply to you and to tell you about NeuraOrder: no advertising networks, no data brokers. The website sets no cookies, loads nothing from other companies, and uses no tracking or analytics. These details are encrypted in our database, alongside the App's data. We keep them until you ask us to delete them, or for 24 months after we last heard from you, whichever comes first. Every email we send includes a way to stop hearing from us.
Where the information is stored
Data is stored in a managed PostgreSQL database hosted by Railway in the United States. All connections use TLS, and the host encrypts stored data and backups at rest. In addition, the App encrypts Shopify access tokens and the contact details you enter (supplier and buyer names, emails, phone numbers and addresses) with keys kept outside the database. Subprocessors: Shopify (the platform the App runs on and billing) and Railway (hosting and database).
Retention and deletion
- Store data is kept while the App is installed so forecasts can use your sales history.
- Raw webhook notifications are deleted after 30 days.
- When you uninstall the App, Shopify notifies us, and all data for your store is permanently deleted when Shopify sends its store-deletion request (48 hours after uninstall).
- When Shopify forwards a customer's data deletion request, we delete any order records listed in it. Customer data access requests forwarded by Shopify are acknowledged; the App holds no customer personal information to provide.
Your rights
You can ask for a copy of your store's data or for its deletion at any time by contacting us. If you are in the European Economic Area, the United Kingdom or California, you have the rights set out in applicable law (such as the GDPR or the CCPA), including access, correction, deletion and objection. We act as a data processor for our merchants' store data.
Security
Access to the App requires Shopify's signed session tokens. Every request is limited to the data of the store that made it. Webhooks from Shopify are verified by signature. Production systems are restricted to authorized personnel, who access store data only to run, secure or support the service (for example, when you ask for help). If a security incident affects your data, we will notify you without undue delay.
Terms
Your use of the App is also governed by our Terms of Service, which include our data processing commitments.
Changes
We will update this page when our practices change and revise the date above.
Contact
Xeroware Sole Proprietorship · [email protected] · Mesa, Arizona, United States