Privacy Policy

Last updated: October 25, 2026

1. Introduction

ReplenishRadar, Inc. ("ReplenishRadar," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website or use our inventory management and demand forecasting service (the "Service").

This policy applies to Account Data (information you provide when creating and managing your account) where ReplenishRadar acts as the data controller. It does not govern Customer Data (your inventory, order, and product data imported from Shopify, Amazon, or other integrations), which is processed on your behalf under our Terms of Service. You control what Customer Data enters the Service and how it is used. The connector for AI assistants (ChatGPT, Codex and Claude) is an exception: section 16 describes how it handles Customer Data.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

Information You Provide Directly

  • Account Information: Email address, name (if provided), and password (hashed) when you register
  • Billing Information: Payment details processed directly and securely by Stripe; we receive only a billing reference token and never store card numbers
  • Organization Details: Business name and settings you configure in your account
  • Communications: Messages you send us through support tickets, email, or feedback forms
  • Integration Credentials: OAuth tokens for Shopify and Amazon Seller Central, stored encrypted; we use these solely to sync authorized platform data for the Service

Platform Data (Imported via API)

When you connect your platforms, we import and process:

  • Shopify: Product names, SKUs, inventory levels, and order history limited to order identifiers, timestamps, statuses, totals, line items, SKUs and variants, quantities, refunds, fulfillment details, and inventory or fulfillment location identifiers
  • Amazon FBA: Product names, ASINs, SKUs, FBA inventory quantities, order data

This data is accessed under your authorization. We read inventory and order data to generate forecasts, alerts, and reporting. We may also perform the following write operations on your explicit instruction: updating inventory quantities in Shopify, and creating inbound shipment plans to Amazon FBA. We do not make unsolicited changes to your inventory or orders. For Shopify, we do not request or store end-customer name, email, phone, billing address, or shipping address.

Automatically Collected Information

  • Log Data: IP address, browser type and version, pages visited, timestamps, referring URLs, and error logs
  • Device Information: Operating system, screen resolution, and device type
  • Usage Data: Features accessed, actions taken, and session duration within the Service
  • Cookies and Similar Technologies: Session identifiers and preference data (see Section 10)

Inferences

We may derive insights from the above (for example, usage patterns that help us understand which features are most valuable) to improve the Service. We do not create inferences about your end-customers.

3. Legal Basis for Processing

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with similar data protection laws, we process your personal information on the following legal grounds:

  • Contractual Necessity: Processing required to provide the Service you have subscribed to, including account management, billing, inventory sync, and alert delivery
  • Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, ensuring security, and sending service-related communications, provided these interests are not overridden by your rights
  • Consent: Where you have given explicit consent, such as for marketing emails, analytics cookies, advertising measurement, and personalization; you may withdraw consent at any time without affecting the lawfulness of prior processing
  • Legal Obligation: Where processing is necessary to comply with applicable law, a court order, or regulatory requirement

4. How We Use Your Information

We use the information we collect to:

  • Create and manage your account and authenticate your access
  • Provide the Service, including inventory sync, demand forecasting, stockout alerts, and purchase order recommendations
  • Process payments and manage your subscription through Stripe
  • Send transactional emails (account confirmation, alerts, invoice receipts, support responses)
  • Send service announcements and product updates (you may opt out of non-essential communications)
  • Monitor and analyze usage to improve the Service and develop new features
  • Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity
  • Maintain the security and integrity of the Service
  • Comply with applicable legal obligations and enforce our Terms of Service
  • Respond to your inquiries and provide customer support

We do not use your account or inventory data to target advertising to you, and we do not sell your personal information for money. Our public marketing website separately uses analytics and advertising cookies to measure our campaigns and reach potential customers; that activity, and your choices about it, are described in the Cookies and Tracking section below.

5. Automated Processing and Profiling

The Service uses automated algorithms to analyze your historical inventory and order data in order to generate demand forecasts, stockout risk scores, and purchase order recommendations. These outputs are based on statistical modeling of your own data and are provided as decision-support tools. You retain full control over all purchasing and inventory decisions.

No automated decisions with legal or similarly significant effects are made about you as an individual based on this processing. If you have questions about how a specific forecast or recommendation was generated, contact us at [email protected].

6. Data Sharing and Disclosure

We do not sell your personal information. We share information only in the following circumstances:

Service Providers

We engage trusted third-party companies to help us operate the Service. These providers access data only as necessary to perform their functions and are contractually prohibited from using it for any other purpose:

  • Google Cloud Platform: Cloud Run application hosting, Cloud SQL PostgreSQL database hosting, Secret Manager, Cloud Tasks, Cloud Scheduler, and related managed infrastructure (United States)
  • Firebase / Google Identity Platform: Authentication for account access
  • Vercel: Application frontend and marketing site hosting (United States)
  • Stripe: Payment processing (United States)
  • Resend: Transactional email delivery
  • Sentry: Application error monitoring and performance tracking (United States); error reports may include technical context such as request metadata and anonymized stack traces
  • Amazon Web Services: Message queuing (SQS) for Amazon SP-API integration

The providers above are ones we engage. When you connect ChatGPT, Codex or Claude you choose OpenAI or Anthropic as the recipient yourself (section 16); we do not engage it to process connector data on our behalf, so it is not a provider of ours for that connection.

Legal Requirements

We may disclose your information if required to do so by law, subpoena, court order, or governmental regulation, or where we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; or (d) protect the personal safety of users of the Service or the public.

Business Transfers

If ReplenishRadar is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share information for any other purpose with your explicit prior consent.

7. International Data Transfers

ReplenishRadar is based in the United States. If you access the Service from outside the United States, including from the European Economic Area, United Kingdom, or Switzerland, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

The United States and other countries may not provide the same level of data protection as your home country. When we transfer personal information from the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or other legally recognized transfer mechanisms.

If you would like more information about the safeguards we use for international transfers, or to request a copy of the applicable transfer mechanism, contact us at [email protected].

8. Data Security

We implement commercially reasonable technical and organizational security measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction, including:

  • Encryption of all data in transit using HTTPS/TLS
  • Encryption of data at rest in our database
  • OAuth tokens and credentials stored encrypted, never in plain text
  • Role-based access controls limiting who can access data internally
  • Audit logging for sensitive operations
  • Regular security reviews and dependency updates

In the event of a confirmed security breach that affects your personal information, we will notify you without undue delay and in any event within 72 hours of becoming aware, to the extent required by applicable law. Notification will be sent to your registered email address.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service and fulfill the purposes outlined in this policy. We also retain information as required to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Retention for AI assistant connector records is in section 16.

Cancelled and Inactive Accounts

When your subscription ends or trial expires, your Customer Data (inventory, orders, forecasts, and settings) is retained for 12 months to allow you to reactivate your account and pick up where you left off without data loss. During this period you may export your data or request its deletion at any time by contacting [email protected]. After 12 months of continued inactivity, Customer Data is permanently deleted.

Explicit Account Deletion

If you explicitly request account deletion:

  • OAuth tokens and integration credentials are immediately revoked
  • Customer Data and account data are deleted within 30 days
  • Backup copies are purged on the rolling backup schedule, typically within 35 days
  • Certain records (e.g., billing history, legal holds) may be retained longer as required by law

Log and Analytics Data

Server logs and anonymized usage analytics are retained for up to 12 months for security, debugging, service improvement, and campaign measurement purposes.

A record of which pages each signed-in user opens in the app, and when, is kept for 90 days so we can support the account and improve the product. It is deleted along with the account or store data.

10. Cookies and Tracking Technologies

What We Use

We use cookies and similar technologies to operate and improve the Service:

  • Essential Cookies: Required for authentication, session management, and basic Service functionality. These cannot be disabled without impairing the Service.
  • Functional Cookies: Remember your preferences (e.g., display settings, selected organization) to improve your experience.
  • Analytics Cookies: Help us understand how the Service is used so we can improve it. We use Sentry for error monitoring, which may collect session context as part of error reporting.
  • Advertising and Measurement Cookies: Our marketing website uses Google Analytics, Google Ads measurement, and Meta Pixel remarketing to measure landing-page performance and campaign effectiveness and to reach people who have visited the site. Whether they run depends on where you are and on your choices, as described below. If you arrive from an ad in ChatGPT, we keep the click reference OpenAI adds to the link, and when you sign up or start a trial we send that reference and a hashed (one-way encoded) copy of your email address to OpenAI so it can count the result of that ad.

Advertising Tracking and Your Choices

We do not sell your personal information for money, and we do not run advertising cookies inside the authenticated Service (the app). On our public marketing website, you control tracking through Your Privacy Choices, linked in the footer of every page, which has four categories: strictly necessary (always on), analytics, advertising, and sale or sharing of personal information.

  • European Economic Area, United Kingdom and Switzerland: analytics, advertising and sharing are off until you turn them on, either from the banner shown on your first visit or from Your Privacy Choices.
  • Everywhere else: analytics, advertising and sharing are on by default, and you can turn any of them off from Your Privacy Choices. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale or sharing, and sharing starts off.

The Meta (Facebook) Pixel and LinkedIn Insight Tag load only when both advertising and sharing are on. We use Google Consent Mode with ads-data redaction: while a category is off, Google tags set no cookies for it and send only cookieless, aggregate measurement signals. Referral and ad-click attribution cookies are set only when advertising is on, and are removed if you turn it off. Turning a category off stops new collection; cookies Google or Meta set earlier stay in your browser until they expire or you delete them. Your choice is stored in a first-party cookie for 6 months in the EEA, UK and Switzerland and 13 months elsewhere. You can also turn off ad personalization in Google's Ad Settings at adssettings.google.com.

Cookie Controls

You can control cookies through your browser settings. Blocking essential cookies will prevent you from logging in or using core features of the Service. Most browsers allow you to refuse or delete cookies; refer to your browser's help documentation for instructions.

Radar AI Chat Assistant

Our marketing website includes an AI chat assistant ("Radar") that helps visitors evaluate whether ReplenishRadar is a fit for their inventory operation. Use of the chat is optional. When you interact with it, we collect and process the following:

  • Transcripts: the messages you send and the assistant's replies. Email addresses, phone numbers, and credit-card-shaped strings are automatically redacted before persistence.
  • Visitor state: non-identifying business signals you mention in conversation (approximate SKU count, sales channels, current tool), used to avoid re-asking and to route you to the most relevant tier.
  • Hashed IP: for abuse prevention only. The hash is salted with a daily-rotating value so it cannot link visitors across days.
  • Conversion attribution: if you start a free trial, request a demo, or request a sample report after using the chat, we record which action was taken so we can measure conversion. No personal-data fields are stored on that record.

Chat session cookie. The chat uses a strictly-necessary signed httpOnly cookie called ss_id to bind your session to the conversation, prevent abuse, and tie a later trial signup back to the chat that preceded it. Lawful basis: legitimate interests (Article 6(1)(f) GDPR). The cookie has a 90-day rolling lifetime, is marked Secure / SameSite=Lax, and is scoped to .replenishradar.com. We do not use it for advertising.

Sub-processors. Chat messages are sent to OpenAI's API (primary processor) for response generation. OpenAI keeps abuse-monitoring logs of API requests for up to 30 days. As a fallback when the primary is unavailable, requests may instead route to Anthropic's API (separate sub-processor), which deletes inputs and outputs within 30 days unless they are flagged for a usage policy violation. Neither provider uses API data to train its models. The full list of AI providers we use, including for the in-app assistants and catalog cleanup, is on our security page.

Retention. Sales-agent transcripts and visitor-state are hard-deleted 90 days after the conversation began. Aggregate cost-tracking records (no transcript content) are kept for 180 days then aggregated and deleted.

Your rights. To export or delete your sales-agent transcript, email [email protected]with the 8-character session prefix shown by the chat's diagnostic endpoint. We process verified DSR requests within 30 days.

11. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or within any shorter period required by applicable law).

  • Access: Request a copy of the personal information we hold about you. You can also export your Customer Data directly from your dashboard.
  • Correction: Request that we correct inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to certain legal exceptions (e.g., billing records required by law). You can also delete your account directly from your dashboard.
  • Data Portability: Receive your personal information in a structured, commonly used, machine-readable format.
  • Restriction: Request that we restrict the processing of your personal information in certain circumstances (e.g., while a correction request is being resolved).
  • Objection: Object to processing based on legitimate interests or for direct marketing purposes.
  • Withdrawal of Consent: Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
  • Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us. You will still receive transactional and service communications.
  • Disconnect Integrations: Revoke platform access (Shopify, Amazon) at any time from your account dashboard.
  • Lodge a Complaint: If you are in the EEA or UK, you have the right to lodge a complaint with your local supervisory authority if you believe we have processed your personal information unlawfully.

We will not discriminate against you for exercising any of these rights.

12. California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with additional rights.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address); commercial information (subscription and billing history); internet or electronic network activity (usage data, log data); and inferences drawn from this information to understand service usage.

Sale or Sharing of Personal Information

We do not sell your personal information for monetary consideration. When you use our public marketing website, online identifiers (cookies, advertising IDs, and ad click IDs from Google and OpenAI) may be disclosed to advertising partners including Google, Meta, and OpenAI to measure and deliver advertising. Under California law, this may qualify as "sharing" for cross-context behavioral advertising. You can opt out of this sharing as described under Your California Rights below.

Your California Rights

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom we share it
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell personal information for money. You may opt out of the advertising-related sharing described above by turning off "Sale or sharing of personal information" in Your Privacy Choices (linked in the footer of every page), by sending a Global Privacy Control signal from your browser, or by emailing [email protected]
  • Right to Limit Use of Sensitive Information: We do not use sensitive personal information beyond what is necessary to provide the Service
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

How to Submit a California Request

Submit requests by email to [email protected]. We will verify your identity before processing requests and respond within 45 days (extendable by an additional 45 days with notice).

Shine the Light: California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for direct marketing.

13. Children's Privacy

The Service is intended for use by businesses and their authorized personnel. We do not knowingly collect personal information from children under the age of 13 (or 16 in the EEA and UK, as applicable). If we become aware that we have collected personal information from a child below the applicable age without parental consent, we will take steps to delete that information promptly.

If you believe we have inadvertently collected information from a child, please contact us at [email protected].

14. Third-Party Links

The Service may contain links to third-party websites, including Amazon Seller Central, Shopify, Stripe, and others. These sites have their own privacy policies and we are not responsible for their content or practices. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply our endorsement of the site or its privacy practices.

15. Amazon SP-API Compliance

As an Amazon Selling Partner API (SP-API) developer, we comply with all Amazon Data Protection Policy requirements. Specifically:

  • We only request and access Amazon data that is necessary for inventory management and demand forecasting
  • We never share Amazon Selling Partner data with third parties for advertising or marketing. We disclose it to a third party only to provide the Service or when you direct us to, for example by connecting an AI assistant, or by asking Shopify Sidekick about it, as described in section 16
  • Amazon data is processed on your behalf and under your authorization, including when you direct it to an AI assistant you connect or ask Shopify Sidekick about
  • We maintain a comprehensive incident response plan and will notify Amazon and affected selling partners of any data breach in accordance with Amazon's requirements

16. ChatGPT, Codex and Claude Connector

If you connect ReplenishRadar to ChatGPT or Codex (OpenAI's AI assistants) or to Claude (Anthropic's AI assistant), this section describes what happens. It applies in addition to the rest of this policy, and it covers the Customer Data the connector moves, which section 1 otherwise leaves to our Terms of Service.

What the connector does

The connector lets you ask the assistant questions about your own ReplenishRadar data and, only if you allow it, make changes. You start the connection from the assistant, sign in to ReplenishRadar on our own page, and choose read-only access or read and change access. The assistant never sees your password.

What the assistant can receive

The results of the requests you or the assistant make: products, SKUs, inventory and forecast figures, supplier names and contact emails, purchase orders, and store and sync status. Cost, price, margin and revenue figures are included only if you tick that option when you connect.

What we receive and keep

We receive the requests the assistant sends us, which are the parameters it derives from your conversation, such as a SKU or a quantity. We never receive your conversation and we cannot read or rebuild it. We keep a record of the connection: your user id, email and name, your organization, the permissions you granted, the access and refresh tokens, and a log of each request and its result status. We use it to run the connection, show it to you, and investigate problems.

Who the recipient is

OpenAI (for ChatGPT and Codex) or Anthropic (for Claude) is the assistant provider you choose, not a service provider we engage to process connector data on our behalf. Once data reaches the assistant it is handled under that provider's terms and privacy policy and your own data settings in the assistant, which, depending on your plan, can include using conversations to improve models. We do not control that. Both companies also appear elsewhere in roles that are separate from this one: OpenAI as an advertising measurement partner (sections 10 and 12), and both OpenAI and Anthropic as AI providers we engage for the website chat, the in-app assistants and catalog cleanup (section 10 and our Security page).

How long we keep connector records

  • Authorization codes last 5 minutes and pending connection requests last 10 minutes.
  • An access token lasts 1 hour. A refresh token lasts 30 days and restarts each time it is used.
  • A connection with no request for 90 days is revoked automatically.
  • When a connection is revoked, its tokens and codes are deleted at once. The record of the revoked connection stays for our audit trail and is deleted with your organization or your user account.
  • Each connector request-log entry is deleted by a daily cleanup once it is 12 months old (a large backlog can delay that by a few days), or earlier with your organization or your user account.
  • Records that stop us repeating a change you asked for are deleted by a daily cleanup once their window (10 minutes, or 60 seconds for a stock count change) has passed, or 7 days after the window for an unfinished one.

Your controls

You can revoke the connection at any time in Settings under Connected apps, and access stops at once. You can also disconnect from inside the assistant. You choose read-only or read and change access for each connection, and change access can be added later only by approving it again. To request export or deletion of connector records, email [email protected].

What not to send

The connector is not for payment card numbers, health information, government identification numbers, passwords, or other credentials. Please do not put them in notes or other free-text fields.

Amazon data

The connector returns Amazon-sourced inventory and order data to the assistant you chose, at your direction and only for your organization. We do not use Amazon data for advertising or marketing and we do not sell it. What the assistant provider does with data you direct it to receive is governed by that provider's terms. The same applies to Shopify Sidekick, described next, because its answers about stockout risk and reorder suggestions cover your whole organization and can include figures that come from Amazon.

Shopify Sidekick

If you use Shopify, ReplenishRadar also answers questions that Shopify Sidekick, Shopify's own assistant, asks on your behalf inside your Shopify admin. Sidekick is an assistant you choose to use there; Shopify's terms and privacy policy apply to what it receives and to how it uses it, and we do not control that.

When you ask Sidekick something ReplenishRadar can answer, we send it one of four kinds of answer: which products are about to stock out, what to reorder and from which supplier, which purchase orders are on their way in, or the stock and forecast figures of a product you name. An answer carries product names and SKUs, stock and forecast quantities, supplier names, purchase order numbers, statuses and expected dates, and links back into the app. It carries no costs, prices, revenue or margins. We only answer a signed-in store staff member whose ReplenishRadar role and plan include that information (some answers need a higher role or plan than others), and we limit how many questions one person can ask in a minute.

We do not store the questions or the answers. We keep at least one line in our server logs for each question (which of the four it was, whether it was answered, how long it took, how many items it covered, and your organization's id), kept as described in section 9, and a per-person counter that expires after about two minutes.

ReplenishRadar has no separate Sidekick switch. Sidekick uses ReplenishRadar only while the app is installed in your Shopify store, so uninstalling ReplenishRadar from your Shopify admin stops it shortly afterwards, and so does ending a staff member's access to the store. You can also simply not ask Sidekick about ReplenishRadar. Shopify's own settings and documentation describe what you can control inside Sidekick.

17. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, such as changes to the categories of data collected, how data is used, or who data is shared with, we will provide at least 14 days' advance notice via email to your registered address or via a prominent in-app notification. For minor or clarifying changes, we may update the policy without advance notice.

The updated policy will be posted at replenishradar.com/privacy with a revised "Last updated" date. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. If you object to a material change, you may close your account before the change takes effect.

18. Contact Us

For privacy questions, data requests, or to exercise your rights under this policy, contact us at:

[email protected]
ReplenishRadar, Inc.

We aim to respond to all privacy inquiries within 30 days. For requests under GDPR, CCPA, or other applicable data protection laws, we will respond within the timeframes required by those laws.

If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.