Privacy Policy

Silva Material Inventory ("the App") is a Shopify embedded application operated by Silva ("we," "us," "our"). This policy describes what data we collect from merchants and their stores, how we use it, how long we keep it, and your rights regarding that data.

1. What data we collect

When a merchant installs the App, we collect and store the following:

• Store URL, shop domain, and shop currency
• A Shopify-issued session and access token required to authenticate API calls. If the session was created through an interactive (online) login rather than the app's background access, it may also include the authenticated staff member's name and email address, as provided by Shopify.
• Product and variant identifiers and titles, needed to configure material requirements. Product images, prices, and Shopify inventory counts are read live from Shopify each time they are displayed in the App and are not stored in our database.
• Inventory location data (location IDs and names) used when recording Production to update Shopify inventory
• Order and fulfillment data received via Shopify order and fulfillment webhooks (order creation, order edits, cancellations, fulfillment creation and updates, and refunds), used exclusively to keep committed and deducted material stock accurate when a merchant chooses to deduct materials automatically as orders are fulfilled. These webhook payloads may contain additional order information, but the App uses and stores only the product variant IDs, line item identifiers, and quantities required for this purpose.

We do not intentionally store customer names, email addresses, phone numbers, billing addresses, or shipping addresses.

2. Data we create inside the App

The App stores operational data created by the merchant:

• Materials: name, unit of measure, stock quantity, cost per unit, low stock threshold
• Product configurations: which materials each product variant requires, quantity per unit, and whether materials are deducted when Production is recorded or when orders are fulfilled
• Inventory history: every stock adjustment, Production, and automatic deduction event, with date, quantity change, resulting stock, and optional reason note
• Production history: records of production the merchant has recorded
• Order-demand tracking: internal references to Shopify order and line item identifiers and quantities, used to keep committed and deducted material stock accurate as orders are created, edited, fulfilled, cancelled, or refunded
• Billing usage tracking: internal records of which orders have already been counted toward usage-based billing, used solely to prevent duplicate charges

This data is scoped to the installing shop. It is not shared with other merchants and is disclosed only to service providers required to host and operate the App, as described in this policy.

3. How we use data

All data collected and stored is used solely to provide the App's core functionality:

• Calculating how many units of each product variant can currently be made from material stock
• Deducting material stock when Production is recorded, or automatically as Shopify orders are created, edited, fulfilled, cancelled, or refunded
• Updating Shopify inventory at the merchant's chosen location when Production is recorded
• Displaying inventory history and Production history to the merchant
• Charging the merchant's usage-based subscription fees through Shopify's Billing API, based on the count of orders for which automatic deduction occurred

We do not use any data for analytics, advertising, personalization, or any purpose beyond operating the App.

4. Order data and automatic deduction

When a merchant chooses to deduct materials automatically as orders are fulfilled, the App subscribes to Shopify's order and fulfillment webhooks (order creation, order edits, cancellations, fulfillment creation and updates, and refunds). As each of these events occurs, the App reads the affected line items and extracts only the variant ID, line item identifier, and quantity needed to keep committed and deducted material stock accurate through the order's full lifecycle, including partial fulfillment, edits, cancellation, and refund.

Material stock deducted through automatic deduction is restored only when Shopify reports that the corresponding fulfillment itself was reversed. Cancelling or refunding an order after it has already been fulfilled does not restore already-deducted stock; it releases only the portion of the order that was not yet fulfilled. Merchants can manually adjust stock in the App if needed.

5. Billing

If a merchant subscribes to a paid plan, the App reports usage to Shopify's Billing API to calculate subscription charges. Each usage report contains only the shop's Shopify-assigned identifier, a timestamp, an idempotency key, and a count. No order, product, or customer details are included. Shopify's Partner API is used to read the shop's current subscription status. Both of these are first-party Shopify APIs; no billing data is shared with any other third party.

6. Data retention and deletion

All shop data described in this policy is retained for as long as the App is installed on the merchant's store.

Approximately 48 hours after the App is uninstalled, Shopify sends us a shop data deletion request through the shop/redact compliance webhook. We use that request to delete the shop's materials, product configurations, inventory history, Production history, order-demand tracking records, billing usage tracking records, Shopify access credentials, and all other shop-specific data from our active PostgreSQL database.

The App uses a Render PostgreSQL database with point-in-time recovery. Deleted records may remain temporarily recoverable in Render's managed backups for up to 7 days. These recovery copies are maintained for disaster recovery and are not used for any other purpose.

7. Data sharing and hosting

The App and its PostgreSQL database are hosted by Render Services, Inc. in Render's Frankfurt region. Render processes data on our behalf to provide application hosting, database hosting, networking, logging, and related infrastructure services.

Although the App's primary services and database are hosted in Frankfurt, Render is a United States-based service provider and data may be processed by Render or its authorized subprocessors in other jurisdictions where permitted by applicable law.

The App uses Sentry (Functional Software, Inc.) for server-side error monitoring. When application errors occur, Sentry receives error reports containing technical details such as stack traces and error messages. Sentry's ingest endpoint is located in Germany. Sentry is a United States-based company. Error events are retained for up to 90 days. Sentry is configured to exclude request headers and IP addresses from error reports.

The App uses Resend (Resend, Inc.), a United States-based email delivery service, to send a one-time onboarding email to the shop's contact email address when the App is first installed. This email address is provided to Resend solely to deliver that message and is not stored by the App or used for any other purpose.

We do not sell or rent merchant or customer data. Data is shared only with Render, Sentry, and Resend as described above, and with Shopify itself for billing as described in Section 5, solely to operate and maintain the App.

8. Security

All data is transmitted over HTTPS. The App and its PostgreSQL database are hosted in Render's Frankfurt region. Access to production systems is restricted to authorized personnel. Render provides infrastructure safeguards including encrypted storage and network security for our hosted services. Application logs are retained by Render for up to 7 days. No internet service can guarantee absolute security.

9. Shopify compliance webhooks

The App responds to the following Shopify privacy compliance webhooks:

• shop/redact: triggers deletion of all shop-specific data from our active database, as described in Section 6.
• customers/data_request: the App does not store customer personal data, so there is no customer data to provide in response to these requests.
• customers/redact: the App does not store customer personal data, so no customer records are deleted in response to these requests.

10. Merchant rights

Merchants may request a description of the data we hold for their store at any time by contacting us at the address below. As noted in Section 6, uninstalling the App initiates permanent deletion of all associated active data.

11. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the App after an update constitutes acceptance of the revised policy.

12. Website analytics

This section applies to our website, silvaapps.com, not to the App. With your consent, our website uses Google Analytics (Google LLC) to understand how visitors use it, such as which pages are viewed and which links are clicked. Google Analytics sets cookies and collects information such as your device and browser type, approximate location, and the site that referred you.

Google Analytics loads only after you accept analytics cookies. If you decline, no analytics cookies are set. You can change your choice at any time using "Cookie settings" at the bottom of any page. We do not use website analytics data for advertising, and we do not combine it with data from the App.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. Google LLC processes this data on our behalf, including in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing adequate protection for personal data transferred to it.

Google Analytics keeps event and user data for 2 months. Your cookie choice is stored in your browser and remembered for 6 months, after which we ask again.

13. Contact

Questions about this policy or data handling practices:
support@silvaapps.com