Privacy Policy

This Privacy Policy explains what information AisleMint collects when you install and use our Shopify app, how we use and protect it, and the rights you have over your data.

1. Introduction

AisleMint is an inventory management and replenishment app for Shopify merchants, developed by Joycraft Software (“Joycraft”, “we”, “us”). This policy applies to the data we process when you install AisleMint on your Shopify store and use its features, including inventory value reports, purchase history, stocktakes, inventory change logs, replenishment suggestions, supplier management, multi-location inventory, and price label printing.

We process your data solely to provide and improve AisleMint. We do not sell your data, and we do not use it to advertise other products to your customers. This policy is intended to comply with the Shopify App Developer Privacy Requirements, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), as applicable.

2. Information We Collect

When you install AisleMint, you connect your Shopify store through Shopify’s OAuth flow, which grants AisleMint access to specific store data. We collect the following categories of information:

2.1 Shopify store data (via the Shopify Admin API)

• Store identity: your shop domain, shop name, shop email, and time zone.
• Product data: products and product variants, including titles, SKUs, and pricing.
• Inventory data: inventory levels, locations, inventory history, and stock counts for your multi-location setup.
• Order data: orders and line items, used to compute purchase history and replenishment recommendations. AisleMint does not collect customer personal details such as names, email addresses, or payment information from orders.

2.2 User-generated data

• Stocktakes and stocktake line items you record while counting inventory.
• Suppliers you create and their contact details.
• Purchase orders, receiving records, and purchase history you enter.
• Replenishment settings and inventory thresholds you configure.

2.3 Billing data

• Your subscription plan, subscription or charge identifier, status, and billing cycle, provided by Shopify’s billing API.
• We do not collect or store your credit card or payment details; billing is handled entirely by Shopify.

2.4 Technical data

• Error logs and usage metrics (such as which features are used and how often) that help us maintain and improve the app.
• A session cookie set by the Shopify authentication flow, used solely to keep you logged in. We do not use advertising, tracking, or cross-site cookies.

3. How We Use Your Information

We use the information we collect to:

• Operate AisleMint and provide its features and functionality.
• Generate inventory value reports, purchase history, stocktake history, and inventory change records.
• Calculate replenishment suggestions and support multi-location inventory management.
• Process subscription billing through Shopify’s billing API.
• Diagnose and fix errors, and monitor service reliability.
• Improve the app and understand how merchants use it at an aggregate level.
• Comply with our legal obligations and protect the security and integrity of our service.

4. Data Sharing and Disclosure

We do not sell your personal or business data. We share data only in the following circumstances:

• Shopify: AisleMint is a Shopify app, so some data (such as your subscription status) is exchanged with Shopify through its official APIs and webhooks to operate the app and process billing.
• Service providers: we use a limited set of third-party providers, such as cloud hosting and database infrastructure, to run the service. These providers process data only on our behalf and under our instructions.
• Legal requirements: we may disclose data if required by law, regulation, or valid legal process, or to protect our rights, safety, or property, or yours.
• Business transfers: if Joycraft is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to this policy.

5. Data Retention

AisleMint stores your data in a PostgreSQL database hosted on our production servers, which are operated on infrastructure provided by our cloud hosting provider (see Section 8 for the location). We keep your data only as long as your shop has an active AisleMint installation, plus a short administrative period, to provide the service and meet legal obligations. Specifically:

• While AisleMint is installed and used, we retain the data needed to operate the app (products, inventory, stocktakes, suppliers, purchase records, subscription status).
• When you uninstall AisleMint, Shopify notifies us through the app/uninstalled webhook. We then delete your shop’s data from our systems — including stored sessions, subscription records, inventory thresholds, stocktakes, suppliers, and purchase data — typically within 30 days of uninstall.
• We also honor Shopify’s compliance webhooks. On shop/redact , we delete all stored data for your shop. On customers/data_request or customers/redact , we confirm no customer personal data is stored: AisleMint does not collect customer names, email addresses, or payment information.

Technical logs are retained for a limited period (typically no longer than 90 days) and are used only for diagnostics and security.

6. Your Rights

Depending on where you are located, you may have the following rights over the data we hold about your shop:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your data. You can also simply uninstall AisleMint, which triggers deletion as described in Section 5.
• Portability: request your data in a structured, machine-readable format.
• Restriction and objection: in some circumstances, request that we restrict or stop processing your data.
• Non-discrimination (CCPA): we will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at the address in Section 11. We respond to verified requests within 30 days. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your data, including:

• Encryption of data in transit using TLS.
• Restricted access: only Joycraft personnel with a genuine operational need can access production systems.
• Secure storage of API credentials (such as Shopify access tokens) in environment variables and encrypted storage, never in source code.
• Regular review of access, monitoring of the service for anomalies, and prompt response to security incidents.

No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

AisleMint’s production infrastructure is hosted on servers operated by our cloud hosting provider. Data may be processed in data centers located in the Asia-Pacific region and may be transferred across borders as needed to provide the service. Where transfers involve countries outside the EEA, UK, or Switzerland, we rely on appropriate safeguards permitted by applicable data protection law and the standard contractual protections used by our hosting provider.

9. Children’s Privacy

AisleMint is a business tool intended for use by merchants aged 18 or older. It is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will update the “Last updated” date at the top of this page and, where material, notify affected merchants through the app or by email. Continued use of AisleMint after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or requests about this Privacy Policy or your data, contact us at:

Joycraft Software
Email: support@joycraft.dev