Qantory Privacy Policy
Qantory is a Shopify app that keeps stock quantities in sync across the Shopify stores of one merchant. This policy explains what data the app accesses when you install it, why, how long it is kept, and how to have it removed. Qantory is operated by [Legal entity name, registered address] (“we”).
What we access
When you install Qantory you grant the app the following Shopify permissions. We use each one for a single purpose:
| Permission | What we use it for |
|---|---|
read_products | Read product variants and their barcodes (EAN/UPC) or SKUs so the same product can be recognised in every store. |
read_inventory | Read stock quantities per location to detect changes and check for drift. |
write_inventory | Update stock quantities in your other stores when a quantity changes in one of them. |
read_locations | List your locations so you can choose which ones share stock. |
We also receive Shopify webhooks about inventory levels, inventory items, products, locations and app uninstallation, plus the mandatory privacy webhooks described below.
What we do not access
- No customer data. The app never requests customer permissions and never receives customer names, e-mail addresses, addresses or payment details.
- No orders. The app does not read orders. When a sale lowers a quantity, Shopify tells us the new quantity, not who bought.
- No storefront access. Qantory runs only inside your Shopify admin and never changes your online store, theme or checkout.
What we store
- Your store's
.myshopify.comdomain, store name and the permissions granted. - An access token for the Shopify API, encrypted at rest with AES-256-GCM and never shown in the app or written to logs.
- Product variant identifiers, barcodes and SKUs; inventory item and location identifiers; stock quantities per location.
- A ledger of every stock change the app processed and every update it sent, used to prevent update loops and to show you what happened.
- Diagnostic logs with technical identifiers (store domain, webhook id, correlation id). Logs never contain tokens or customer data.
How long we keep it
| Event | What happens |
|---|---|
| You uninstall Qantory | The access token is revoked immediately and stock updates to that store stop. Product, location and stock data for the store is deleted 48 hours after uninstallation. Reinstalling within that window keeps the data. |
Shopify sends a shop/redact request | The deletion runs at once. |
| After deletion | The store record is anonymised (domain and name removed). Anonymised ledger rows with internal identifiers and quantities are kept so the other stores in a sync group retain a complete history of their own stock. |
Customer data requests (customers/data_request, customers/redact) | Acknowledged and recorded. Nothing to disclose or delete, because the app holds no customer data. |
Where the data is processed
Qantory runs on managed cloud infrastructure: application and background workers on Railway, the admin interface on Vercel, a managed PostgreSQL database and a managed Redis queue (Upstash). All traffic between Shopify, your browser and Qantory uses TLS. Every request from Shopify is verified with its HMAC signature before it is processed.
Cookies and browser storage
When opened inside the Shopify admin, Qantory authenticates with Shopify session tokens and sets no cookies of its own. The app does not use advertising or analytics trackers.
Sharing
We do not sell or share your data with third parties, other than the infrastructure providers listed above, who process it on our behalf under their own data-processing terms. We disclose data only when required by law.
Your rights
You can uninstall the app at any time from your Shopify admin, which triggers the deletion described above. To ask what we hold about your store, to request earlier deletion, or for any privacy question, write to support@digifluss.com. If you are in the European Economic Area or the United Kingdom you also have the right to lodge a complaint with your data-protection authority.
Changes
We will update this page when the app's data handling changes and update the date at the top. Material changes are announced inside the app.