Privacy Policy

Last updated: April 26, 2026

Replen ("we", "our", "us") operates a Shopify app that helps merchants manage purchase orders, supplier relationships, and inventory. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you install Replen, we collect and store the following data:

• Shop data: your Shopify shop domain, shop name, currency, and email address.
• Product & inventory data: product titles, SKUs, barcodes, prices, and inventory levels — fetched via the Shopify API to power purchase orders and stock alerts.
• Supplier data: supplier names, emails, and addresses you enter manually in the app.
• Purchase order data: purchase orders you create within the app, including line items, quantities, costs, and reception records.
• Configuration: your app settings (alert thresholds, default location, label format, etc.).

2. How We Use Your Data

• To provide and operate the Replen app features (purchase orders, reception, stock alerts, label printing).
• To send transactional emails (purchase order PDFs to suppliers, low-stock alert notifications to your configured address).
• To send a welcome email when you first install the app.
• To calculate sales velocity and generate replenishment recommendations.

We do not sell, rent, or share your data with third parties for marketing purposes.

3. Data Storage

Your data is stored in a PostgreSQL database hosted on Railway (railway.app), with servers located in the United States. We take reasonable technical measures to protect your data, including encrypted connections (TLS) and access controls.

4. Third-Party Services

Replen uses the following third-party services:

• Shopify API — to read and update your inventory and product data.
• Resend (resend.com) — to send transactional emails. Your shop email and supplier emails are transmitted to Resend solely for email delivery.
• Railway (railway.app) — for app hosting and database.

5. Data Retention

We retain your data for as long as your shop has the app installed. When you uninstall Replen, we receive a Shopify webhook and may retain anonymized data for up to 30 days before deletion. You can request immediate deletion by contacting us at [email protected].

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at [email protected].

7. Cookies

Replen is an embedded Shopify app and does not set cookies on your storefront. Shopify may set cookies as part of their admin session management.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated date. Continued use of the app after changes constitutes acceptance.

9. Contact

Questions? Email us at [email protected].