Skip to content

Privacy and your data

Shelfcast works with your catalog, your stock and your suppliers. It doesn’t need your customers, and it doesn’t keep anything about them. Here’s exactly what it reads, what it keeps and what happens when you leave.

This page explains how the app behaves. The legal policy is the Shelfcast privacy policy.

When you install, Shopify asks you to approve this access:

Access Why Shelfcast needs it
Read products To list your products and variants with their titles, vendors, SKUs, barcodes and prices, and to let you pick products for suppliers and purchase orders.
Read inventory To read stock levels at each location, product costs, and whether Shopify tracks each product’s inventory.
Write inventory To show purchase orders as incoming, add received stock, and apply stock count differences.
Read locations To list your locations and their addresses, for deliveries and counts.
Read orders To work out how many of each product sold each day, for forecasting.

Only stock quantities, and only when you:

  • mark a purchase order as ordered, receive it, cancel it or close it;
  • complete a stock count.

If a product isn’t stocked at the location involved yet, Shelfcast starts stocking it there first. It never changes your products, prices, costs, orders or customers.

Your store’s details — its name, email address, currency, timezone and plan.

Your catalog and stock — product and variant titles, vendors, product types, SKUs, barcodes, prices, costs and image links; stock levels at each location; and a daily record of each product’s available stock.

Your sales, as daily totals — how many of each variant sold each day. Shelfcast reads your orders to count them, then keeps only those totals. It never keeps the orders, order numbers, or anything about who placed them.

Your staff — the name, email address and admin language of each staff member who opens Shelfcast, from Shopify. Names are shown on the purchase orders, counts, imports and history entries each person made.

Your suppliers — everything you enter about them, including contact names, email addresses and phone numbers. These can be personal details of the people you deal with, so add only what you need.

Your work in Shelfcast — purchase orders, stock counts, inventory history, settings and email templates.

Imported files — each file is deleted once its import finishes. Its rows become suppliers, orders or history entries, including any staff names in an adjustment file’s user column. The import’s record keeps the file name and the reasons for up to 50 skipped rows.

Sign-in sessions — while someone uses Shelfcast, a short-lived session with their IP address and browser details. It expires after two hours without use.

  • No customer data — no names, email addresses, phone numbers or addresses of your customers.
  • No order details beyond the daily totals above.
  • No payment details. Your plan is billed by Shopify.

Because there’s no customer data, when Shopify passes on a customer’s request to see or erase their data, there’s nothing in Shelfcast to send or delete.

  • Shopify, which Shelfcast reads from and writes stock changes to.
  • Your suppliers, when you email them a purchase order. They receive what’s on the order: your store’s name and email address, the delivery location’s address, the products, quantities and costs.
  • Our email provider, which delivers those purchase order emails to the addresses you enter.

Shelfcast doesn’t add analytics or tracking code of its own.

There’s no button to delete everything while you’re still using Shelfcast. Within the app, deleting a draft purchase order is permanent; deleted suppliers, and products deleted in Shopify, are kept so your history still makes sense.

Email support@portsidelabs.io — a person reads it.