Privacy policy

Privacy Policy

Last updated: May 13, 2026

1. Introduction

This Privacy Policy explains how StockCentral, operated by StockCentral, LLC ("we," "us," or "our") collects, uses, and protects information when you use our inventory and operations management app (the "Service") through the Shopify App Store or directly at stockcentralerp.com.

By installing or using StockCentral, you agree to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email, business name)
  • Payment information (processed via Shopify Billing or Stripe — we do not store card numbers)
  • Communication with our support team

2.2 Information from Shopify

When you install StockCentral, Shopify grants us access to specific data based on the permissions you approve. We access only the data necessary to operate the Service:

  • Products & Inventory: SKUs, names, descriptions, prices, stock levels, variants
  • Orders: order numbers, customer name/email, line items, total amounts, financial status, fulfillment status
  • Customers: name and email (limited to order context)
  • Shop information: shop name, owner, currency, timezone, plan

We do not access:

  • Customer payment information
  • Customer addresses outside of order context
  • Discount codes or marketing data
  • Shop analytics or reporting
  • Theme files or storefront design

2.3 Information from Use

  • IP address and device information (for security and abuse prevention)
  • Usage logs (which pages you visit within StockCentral, for debugging)
  • Error reports (for fixing bugs)

3. How We Use Information

We use your data to:

  • Operate the Service and sync data between Shopify and StockCentral
  • Authenticate your account and prevent abuse
  • Send service-related emails (welcome, billing, security alerts)
  • Provide customer support when you contact us
  • Improve the product (in aggregate, never sharing your specific data with others)
  • Comply with legal obligations

We do NOT:

  • Sell your data to third parties
  • Use your data for advertising
  • Train AI models on your customer data
  • Share data between merchants (multi-tenant isolation is core to our architecture)

4. Data Sharing & Third Parties

We share data only with these service providers, who help us operate the Service:

  • Railway (hosting infrastructure) — data stored in US data centers
  • SendGrid (transactional email) — used to send service emails
  • Stripe / Shopify Billing (payment processing) — used to process subscription payments
  • Sentry (error tracking, optional) — anonymized error reports for debugging

We may disclose information if required by law (subpoena, court order) or to protect rights and safety. We will notify you of any such request unless legally prohibited.

5. Data Retention

  • Active accounts: We retain your data for as long as your StockCentral account is active.
  • Cancelled accounts: We export your data to you and delete it from our systems within 30 days of cancellation, unless legal obligations require longer retention.
  • Backups: Backups are encrypted and rotated every 30 days. After cancellation, backup data is purged within 60 days.

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the data we hold about you
  • Correction: Correct inaccurate data
  • Deletion: Request deletion of your data (subject to legal obligations)
  • Portability: Receive your data in a portable format (CSV, JSON)
  • Objection: Object to certain processing
  • Withdraw consent: Cancel your account at any time

To exercise any of these rights, email support@stockcentralerp.com. We respond within 30 days.

7. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the US. We use industry-standard safeguards (encryption in transit and at rest, access controls) to protect your data.

8. Security

We implement the following security measures:

  • Encryption in transit: All connections use HTTPS/TLS 1.2+
  • Encryption at rest: Database backups encrypted with AES-256
  • Access controls: Only authorized personnel access production systems
  • Multi-tenant isolation: Every database row is tagged with your shop ID; cross-shop access is blocked at the application layer
  • Regular security audits: We periodically review code and infrastructure
  • Incident response: We will notify affected users within 72 hours of any confirmed data breach

No system is 100% secure. We cannot guarantee absolute security but commit to industry best practices.

9. Children's Privacy

StockCentral is intended for businesses operating Shopify stores. It is not designed for or directed at children under 13. We do not knowingly collect data from children.

10. Cookies & Tracking

The StockCentral app (in your Shopify admin) uses essential cookies for authentication only. Our marketing site at stockcentralerp.com may use analytics cookies (Google Analytics or Plausible) to understand site traffic. See our Cookie Policy for details.

11. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect, the right to delete, and the right to opt out of "sale" (we do not sell data). To exercise these rights, email support@stockcentralerp.com.

12. European Residents (GDPR)

If you are in the European Economic Area, UK, or Switzerland, you have additional rights under GDPR. The legal basis for processing your data is:

  • Contract: To deliver the Service you signed up for
  • Legitimate interest: Security, fraud prevention, product improvement
  • Consent: For optional features you explicitly enable
  • Legal obligation: To comply with tax, accounting, or legal requirements

You have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email at least 30 days before taking effect. Continued use after changes constitutes acceptance.

14. Contact

For questions about this Privacy Policy or our data practices:

Email: support@stockcentralerp.com Business name: StockCentral, LLC Mailing address: PO BOX 252, Youngsville, NC 27525 Data Protection Officer: support@stockcentralerp.com