Privacy Policy for Shopify Merchants

Last updated: November 6, 2026

1. Introduction

Restocked is provided by Arken, LLC d/b/a Restocked, a Delaware limited liability company based in Huntingdon Valley, Pennsylvania ("Restocked", "we", "our", "us"). Restocked is an inventory intelligence platform that integrates with Shopify to help merchants manage products, inventory, and purchasing decisions. This Privacy Policy explains how we collect, use, and protect your information.

We process your store data on your behalf and under your instructions, as your service provider. We decide how account, usage and website information is used, as described below.

2. Information We Collect

Store Data (via Shopify)

• Products and variants: titles, descriptions, prices, SKUs, inventory quantities, images
• Orders: order numbers, line items, quantities, prices, discounts, tags, notes and timestamps, plus the shipping name, city, state or province, ZIP or postal code and country (see section 10)
• Inventory levels: stock quantities across locations

Account Information

• Email address and name (for your Restocked login)
• Sign-in credentials (passwords are stored only as one-way hashes) and two-factor authentication settings
• Shopify store domain

Usage Data

• Request logs: IP address, pages and features used, timestamps and response times
• A history of changes made in the application, such as edits to settings, forecasts and purchase orders, and who made them
• Error information used to diagnose problems

3. How We Use Your Information

• To provide inventory intelligence, forecasting, replenishment analysis, and sales reporting
• To sync your Shopify store data for analysis
• To authenticate your account and manage access
• To send service emails, such as sign-in and password-reset messages, alerts, and product updates (you can opt out of product updates at any time using the link in the email)
• To provide support, diagnose errors, and keep the service secure and reliable
• To improve the service, as described in section 4

4. Improving Restocked

We use store data in our development and testing environments to design, test and validate forecasting methods, model settings and features. We use identifiable data only to support your own service and to develop features available to you. We never use your identifiable data to configure another merchant's service, never show it to another merchant, and never use it for sales or marketing. Improvements we develop this way may be made available to all merchants.

We may also create aggregated or de-identified information that does not identify you or any person, and use it for any purpose.

5. AI Features

Some features use AI models from Anthropic, for example to review a SKU's forecast. When you use them, the relevant store data, such as product descriptions, sales and inventory figures and notes entered by users, is sent to Anthropic to produce the result. We do not intentionally send personal data to the AI provider, and user identities are not included in AI requests.

Where you supply your own Anthropic API key, those requests run under your Anthropic account and your agreement with Anthropic governs Anthropic's use. Where requests run under our account, our agreement with Anthropic prohibits training on the data we send. We do not use your data to train AI models.

6. Data Sharing

We do not sell, rent, or share your data with third parties for marketing purposes. We share data only:

• With service providers that help us run Restocked, only as needed and under obligations to protect it. Our main providers are:

  Provider	Purpose	Location
  DigitalOcean	Hosting and database	United States
  Twilio SendGrid	Email delivery	United States
  Anthropic	AI analysis (section 5)	United States

  This table is not a complete list. Other providers support functions such as error and uptime monitoring and business email. We will provide our current list of service providers on request.
• For legal reasons, when required by law, subpoena or court order
• In a business transfer, to a successor in a merger, acquisition or sale of our business, which would remain bound by our commitments to merchants

7. Data Retention

• Store data is kept for as long as your account is active. If you uninstall the app from Shopify, we initiate data deletion within 72 hours. You may also request data deletion by contacting us.
• Request logs and change history are kept for as long as we need them for security, audit and troubleshooting, which can extend beyond the end of your account.
• De-identified and aggregated information may be kept indefinitely.

8. Data Security

• Encryption in transit (TLS) and encrypted storage of API credentials
• Each merchant's data kept logically separate from every other merchant's
• Role-based access controls, and two-factor authentication available to every user
• Restricted network access to our production database

No system is perfectly secure. If we confirm unauthorized access to your data, we will notify you without undue delay, and in any case within 72 hours of confirming it.

9. Your Rights

You have the right to:

• Access the data we hold about your store
• Request correction of inaccurate data
• Request deletion of your data
• Export your data

10. Shopify Customer Data

From each order, Restocked stores the shipping name and the shipping city, state or province, ZIP or postal code and country. We use them only to analyze sales and demand (for example by region) and to show order detail to your team, never for marketing. We do not store your customers' street addresses or phone numbers. The order email is read during import and not kept. Your customers' requests about their personal information should go to you; we will help you respond.

11. Cookies

We use only the cookies needed to run the service, such as one that keeps you signed in for your session, an optional "remember me" cookie if you choose it, a short-lived cookie used during Shopify sign-in, and a cookie that remembers your store's domain on the sign-in page for one year. We do not use analytics, advertising or cross-site tracking cookies.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the application or email.

13. Contact

For privacy questions or data requests, contact us at [email protected].