Privacy Policy

Material Tracking ("the App") is a Shopify embedded application operated by Silva ("we," "us," "our"). This policy describes what data we collect from merchants and their stores, how we use it, how long we keep it, and your rights regarding that data.

1. What data we collect

When a merchant installs the App, we collect and store the following:

• Store URL, shop domain, and basic shop information (name, currency, timezone)
• Shopify session and access token required to authenticate API calls
• Product and variant data (variant IDs, display names, images, prices) needed to configure production specifications
• Inventory location data (location IDs and names) used when logging a build to update Shopify inventory
• Order line item data received via the orders/fulfilled webhook, used exclusively to deduct material stock in Auto mode. Shopify fulfillment webhook payloads may contain additional order information, but the App uses and stores only the product variant IDs and quantities required to deduct material stock.

We do not intentionally store customer names, email addresses, phone numbers, billing addresses, or shipping addresses.

2. Data we create inside the App

The App stores operational data created by the merchant:

• Materials: name, unit of measure, stock quantity, cost per unit, low stock threshold
• Production configurations: which materials each product variant uses, quantity per unit, production mode
• Stock activity log: every stock adjustment and build event, with date, quantity change, stock after, and optional reason note
• Build history: records of manually logged production builds

This data is scoped to the installing shop. It is not shared with other merchants and is disclosed only to service providers required to host and operate the App, as described in this policy.

3. How we use data

All data collected and stored is used solely to provide the App's core functionality:

• Calculating how many units of each product variant can be made from current material stock
• Deducting material stock when a build is logged (Build mode) or when a Shopify order is fulfilled (Auto mode)
• Updating Shopify inventory at the merchant's chosen location when a build is confirmed
• Displaying stock activity and build history to the merchant

We do not use any data for analytics, advertising, personalization, or any purpose beyond operating the App.

4. Order data and Auto mode

When a merchant enables Auto mode on a product configuration, the App subscribes to theorders/fulfilled Shopify webhook. When an order is fully fulfilled, we receive the order payload and extract only the variant ID and quantity from each line item. This information is used to deduct the corresponding raw material stock.

Material stock deducted by Auto mode is not automatically restored if an order is cancelled, refunded, or returned. Merchants can manually adjust stock in the App if needed.

5. Data retention and deletion

All shop data (materials, configurations, stock activity, and build history) is retained for as long as the App is installed on the merchant's store.

Approximately 48 hours after the App is uninstalled, Shopify sends us a shop data deletion request through the shop/redact compliance webhook. We use that request to delete the shop's materials, product configurations, stock activity, build history, Shopify access credentials, and other shop-specific data from our active PostgreSQL database.

The App uses a Render PostgreSQL database with point-in-time recovery. Deleted records may remain temporarily recoverable in Render's managed backups for up to 7 days. These recovery copies are maintained for disaster recovery and are not used for any other purpose.

6. Data sharing and hosting

The App and its PostgreSQL database are hosted by Render Services, Inc. in Render's Frankfurt region. Render processes data on our behalf to provide application hosting, database hosting, networking, logging, and related infrastructure services.

Although the App's primary services and database are hosted in Frankfurt, Render is a United States-based service provider and data may be processed by Render or its authorized subprocessors in other jurisdictions where permitted by applicable law.

The App uses Sentry (Functional Software, Inc.) for server-side error monitoring. When application errors occur, Sentry receives error reports containing technical details such as stack traces and error messages. Sentry's ingest endpoint is located in Germany. Sentry is a United States-based company. Error events are retained for up to 90 days. Sentry is configured to exclude request headers and IP addresses from error reports.

We do not sell or rent merchant or customer data. Data is shared only with Render and Sentry as described above, solely to operate and maintain the App.

7. Security

All data is transmitted over HTTPS. The App and its PostgreSQL database are hosted in Render's Frankfurt region. Access to production systems is restricted to authorized personnel. Render provides infrastructure safeguards including encrypted storage and network security for our hosted services. Application logs are retained by Render for up to 7 days. No internet service can guarantee absolute security.

8. Shopify compliance webhooks

The App responds to the following Shopify privacy compliance webhooks:

• shop/redact: triggers deletion of all shop-specific data from our active database, as described in Section 5.
• customers/data_request: the App does not store customer personal data, so there is no customer data to provide in response to these requests.
• customers/redact: the App does not store customer personal data, so no customer records are deleted in response to these requests.

9. Merchant rights

Merchants may request a description of the data we hold for their store at any time by contacting us at the address below. As noted in Section 5, uninstalling the App initiates permanent deletion of all associated active data.

10. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the App after an update constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or data handling practices:
support@silvaapps.com