On this page
1. Who we are
StockUrgify ("StockUrgify", "we", "us", or "our") is a low-stock urgency app for Shopify stores. We display configurable inventory urgency badges on storefront product pages and provide alerts and analytics so merchants can measure conversion lift. This Privacy Policy explains what data we collect when you install and use StockUrgify, how we use it, and the choices and rights available to you.
This policy covers two groups: merchants who install StockUrgify on their Shopify store, and storefront visitors who view a store where StockUrgify is active.
2. Information we collect
From merchants
- Store & account data — your shop domain (e.g. example.myshopify.com), shop name, store owner name, store and contact email, phone, business address, Shopify plan, country, currency and timezone, provided by Shopify during OAuth and read from the Shopify Admin API.
- Product & inventory data — product titles, variants, IDs, images and inventory levels, which we cache to decide when an urgency badge should appear.
- App configuration — your thresholds, badge messages, colors, templates, alert channels, targeting rules and social proof / back-in-stock settings.
- Order data (limited) — when the recent sales popup is turned on, we read your store's orders and keep only the order ID, the product purchased and the time of purchase. We do not store the customer's name, email, address or any payment details from orders.
- Billing data — your subscription plan and status. Payments are handled by Shopify Billing; we do not receive or store card details.
- Support communications — messages you send us and related metadata.
From storefront visitors
- Badge telemetry — anonymous impression and click events for urgency badges, including the product viewed and a timestamp.
- Live viewer counts — when the live viewer counter is on, an open product page sends a heartbeat carrying a random ID that is generated for that page view only. It is not stored on the shopper's device and is not linked to the shopper. Only heartbeats from the last 75 seconds are counted, and they are deleted within about an hour.
- Back-in-stock sign-ups — when a merchant on the Premium plan turns on back-in-stock notifications, a shopper can choose to enter their email address on a sold-out product. We store that email with the product (and variant) they asked about, the page language, and when they signed up. We use it only to send that shopper one email when the item is available again, on the merchant's behalf.
- Technical data — coarse data such as approximate region (for geo-targeting), browser language and device type. The shopper's IP address is used briefly to rate-limit back-in-stock sign-ups and is not stored with them. We do not seek to identify individual shoppers.
3. How we use information
- To provide the core service — deciding when and how to show urgency badges on your storefront.
- To sync inventory and send low-stock and out-of-stock alerts via your chosen channels (email, Slack, Discord).
- To generate impression, click and conversion analytics in your dashboard.
- To show social proof on your storefront — a live count of people viewing a product and a popup of recent purchases (product and time only).
- To email shoppers who asked to be notified when a sold-out product is back in stock. Each sign-up gets one email; we never use these emails for marketing, and we never share them with other stores.
- To operate billing and enforce plan limits.
- To provide support, prevent abuse, and keep the service secure.
- To send important service and transactional messages (you can opt out of non-essential email).
We do not sell your data or storefront visitor data, and we do not use it for advertising.
4. Storefront visitor data
When StockUrgify is active on a store, our script is loaded on storefront pages to render badges, show social proof and record anonymous impression/click events. This data is used only to power the merchant's analytics and to deliver these storefront features. It is processed on the merchant's behalf.
Back-in-stock emails. If a shopper enters their email in a back-in-stock form, the merchant is the controller of that email and StockUrgify processes it for them. We send one notification when the product or chosen variant is available again, with a link back to the product. A shopper who wants their email removed can ask the merchant or email privacy@stockurgify.com. When Shopify sends us a customers/redact request for that shopper, we delete their sign-ups.
The merchant is responsible for disclosing the use of StockUrgify, including back-in-stock sign-ups, in their own store privacy policy where required.
5. Sharing & subprocessors
We share data only with service providers ("subprocessors") that help us run StockUrgify, and only as needed to deliver the service:
| Provider | Purpose |
|---|---|
| Shopify | App platform, OAuth, billing, webhooks, Admin API |
| Cloud hosting & database | Application hosting and storage |
| Email delivery | Transactional email, digest alerts and back-in-stock notifications to shoppers |
| Slack / Discord | Optional alert delivery to channels you configure |
We may also disclose information if required by law or to protect our rights, users or the public. The current list of subprocessors is available on request — see Contact.
6. Data retention
We keep merchant configuration and cached product data for as long as the app is installed. When you uninstall StockUrgify, your shop data is queued for deletion and removed in line with Shopify's mandatory shop/redact webhook (typically within 48 hours of the request, up to 30 days). Aggregate analytics history is retained according to your plan and then purged. Live viewer heartbeats are deleted within about an hour, and recent sales for the popup (order ID, product and time only) are deleted after 60 days. Back-in-stock sign-ups are deleted 90 days after the notification is sent, or after 180 days if the product never comes back, and immediately on a customers/redact request. See Data & GDPR for the redaction workflow.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, restrict, or delete personal data we hold, and to object to certain processing. Merchants can exercise most of these directly in the app or by uninstalling. To make a formal request, contact us at privacy@stockurgify.com. For GDPR/CCPA specifics, see Data & GDPR.
8. Security
We protect data in transit with TLS and restrict access to production systems on a need-to-know basis. Shopify API access uses scoped OAuth tokens, and all webhooks are HMAC-verified. No system is perfectly secure, but we work to apply industry-standard safeguards and to respond promptly to any incident.
9. Cookies & tracking
The embedded admin uses only the cookies and session tokens required for Shopify authentication. The storefront script is designed to be lightweight and does not set advertising or cross-site tracking cookies. It uses session storage only to remember, for the current browsing session, that a shopper closed the recent sales popup. See Data & GDPR for more detail.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, notify merchants in-app or by email. Continued use after changes take effect constitutes acceptance.
11. Contact us
Questions about privacy? Email privacy@stockurgify.com. For general support, email support@stockurgify.com.