Privacy Policy — Restokio

The short version: we read your Stocky data with a read-only key, store it encrypted so you can export it, never touch your customers' personal data, and delete everything the moment you ask — or automatically when you uninstall.

Who we are

Restokio ("we", "us") provides a backup and export tool for merchants using Stocky on Shopify. This policy explains what data we handle when you use the Restokio app or this website, and how to reach us about it.

What we collect, and why

Your Stocky API key. You provide it so we can read your data. It is encrypted at rest and used only for read-only requests to Stocky's API. We never write to or modify your Stocky account.
Suppliers and purchase orders retrieved from Stocky: supplier names and contact details, purchase order lines, costs, dates and statuses. This is the data you are backing up — storing it is the product.
Your shop domain and app session, provided by Shopify when you install the app, used to authenticate you and keep your data separate from other shops'.
Email address, only if you submit it on our website to be notified about the product. Used for that purpose alone — no third-party marketing, no list sharing.

What we do not collect

We do not collect or store your customers' personal data. The app requests the minimum Shopify scope (read_products) and reads supplier and purchase order records only. We do not sell data to anyone, run third-party ads, or use tracking pixels on this site.

Where your data lives

Rescued data is stored in our application database, isolated per shop, with the Stocky API key encrypted at rest. Access is limited to what the app itself needs to show you your data and generate exports.

Deletion

On request: use the delete option in the app, or email us — we purge suppliers, purchase orders, rescue history and your API key.
On uninstall: the same purge runs automatically when you remove the app from your store.
Shopify privacy webhooks: we honor Shopify's shop/redact, customers/redact and customers/data_request webhooks. Since we hold no customer personal data, customer requests are acknowledged with nothing to disclose.

Sharing

We share data with no one, except the infrastructure providers that host the application (who process it on our behalf) and Shopify itself as required for the app to function. We will disclose data if legally compelled to, and will tell you if the law allows.

Changes

If this policy changes in a way that affects your data, we will note it here with a new date and, for material changes, notify you in the app.

Contact

Questions or deletion requests: support@restokio.com.