Stock Hub

Stock Hub · Shopify app

Privacy policy

This policy explains what Stock Hub collects when a merchant installs the app from Shopify, how that information is used, and how long it is kept. It is written for Shopify App Store requirements and the mandatory GDPR compliance webhooks. It is not legal advice.

Last updated 16 August 2026

Who we are

Stock Hub (“Stock Hub”, “we”, “us”) is a standalone Shopify app that keeps one inventory number across every store a merchant connects to their hub. The app opens at stock.krizileads.online after the merchant installs or opens it from Shopify Admin. We do not run a public storefront and we do not sell merchant or customer data.

What we collect through Shopify APIs

After a merchant installs Stock Hub and approves access, we use Shopify’s Admin API and webhooks with these scopes: read and write inventory, read and write products, read orders, and read locations. From those APIs we store:

  • Shop identity: myshopify domain, shop name, and the offline access token needed to sync that store (token stored encrypted).
  • Catalog data needed to match stock: product and variant IDs, SKUs, barcodes, titles, and inventory item IDs.
  • Inventory quantities and locations so sales on one store can update the others.
  • Order references for the sync trail: Shopify order id, order name, line-item SKUs and quantities, and order money totals used for hub analytics. We do not store customer names, emails, phone numbers, addresses, or payment details.

What we collect from the merchant

Merchants may give us a company or brand name, currency, timezone, country, sync preferences, and (if they contact us) a name, email, subject, and message. Billing for paid plans is charged by Shopify through app subscriptions. We store the Shopify subscription id and plan name so we can unlock the correct store limit. We do not collect card numbers.

We do not ask merchants for information about their customers, and we do not drop cookies or tracking pixels on a merchant’s online store or on their buyers’ devices.

What we collect from merchants’ customers

Nothing directly. Stock Hub is not embedded on the storefront and does not identify shoppers. Order webhooks may include customer fields from Shopify; we persist only operational order and line-item fields required to adjust stock and show a sales summary. Customer personal data is not written to our database.

Automated logs

We keep application logs and sync job records (shop domain, SKU, quantity change, success or error, timestamps) so merchants can see why stock moved and so we can fix failures. These logs are about the merchant’s use of the app, not about storefront visitors.

We also set a first-party session cookie on stock.krizileads.online after Shopify OAuth so the merchant stays signed in. The cookie is HttpOnly and is not used for advertising.

How we use the information

We use it only to provide Stock Hub:

  • Connect stores into one hub and enforce the plan’s store limit.
  • Import products, map SKUs, and keep inventory in sync.
  • Copy new products to other connected stores when the merchant asks.
  • Show orders, reconciliation, analytics, and sync errors in the app.
  • Process Shopify billing webhooks and complimentary plan grants.
  • Reply to support tickets the merchant submits in the app.

We do not sell this information, use it to advertise to buyers, or use it to train unrelated models.

How long we keep it

Hub records (organization, connected shops, mappings, inventory balances, order references, and audit history) stay for as long as the merchant uses Stock Hub. After Shopify sends the shop/redact webhook (typically 48 hours after uninstall), we delete that shop’s Shopify sessions and encrypted access tokens and mark the installation inactive. Organization-owned inventory and audit history may be retained as business records until the remaining stores are removed or the merchant asks us to delete the hub.

Where information is processed

Stock Hub is hosted on infrastructure that may process data outside the European Economic Area. Shopify also processes Admin API and webhook data under Shopify’s own terms. If you need a data-processing addendum or a specific residency answer, contact us using the details below.

Shopify GDPR compliance webhooks

Stock Hub implements the mandatory compliance webhooks required for App Store apps and responds with HTTP 200 after verifying the request:

  • customers/data_request — we do not store customer personal data, so there is nothing to return beyond this acknowledgement.
  • customers/redact — we do not store customer personal data, so there is nothing to erase.
  • shop/redact — we delete sessions and credentials for that shop as described above.

How to contact us

Merchants can open a ticket in Stock Hub under Settings, or use the listing contact details:

Privacy questions about this policy should go to the same email. We aim to respond within a few business days.

Changes

If we change how Stock Hub collects or uses data, we will update this page and the “Last updated” date. Material changes that affect merchants will also be reflected in the Shopify App Store listing where required.