Replenio Privacy Policy
This privacy policy describes how Veltrio Labs LLC ("Veltrio Labs", "we", "us") collects, uses, and protects data when you install and use Replenio, our purchase orders and inventory receiving app for Shopify (the "App"). It applies to the App specifically; our website is covered by the separate website privacy policy.
Data we store
When you install and use the App, we store the following data in our database:
- Shop information — your store's Shopify domain, store name, contact email, currency, locations, and app settings.
- Suppliers — supplier names, contact details, addresses, payment terms, and catalog data you enter into the App.
- Purchase orders — purchase order contents, including products, quantities, prices, notes, statuses, and generated PDF documents.
- Receiving records — records of received deliveries, including quantities, dates, discrepancies, and the user who recorded them.
- Cost data — unit costs, landed cost allocations, and cost history used for weighted-average and FIFO cost tracking.
- App user information — the name and email address of the staff member using the App, as provided by the Shopify session, used to attribute actions inside the App and for support.
We do not collect or store personal data of your storefront customers. The App does not request access to customer records or customer personal data. To power reorder suggestions, the App reads recent order line items (products, quantities, and order dates) from the Shopify API; this information is used only for the calculation and is not stored, and it never includes customer names, emails, addresses, or other personal details.
How we use the data
- To provide the App's functionality: creating and emailing purchase orders, managing suppliers, recording receiving, and calculating costs and analytics.
- To provide customer support when you contact us.
- To monitor errors and keep the App reliable and secure.
- To bill for the App through Shopify's billing system.
We do not sell or rent your data, and we do not use it for advertising.
Shopify GDPR webhooks
The App subscribes to and honors Shopify's mandatory privacy webhooks:
- customers/data_request — because the App does not store storefront customer personal data, we respond confirming that no customer data is held.
- customers/redact — likewise, there is no storefront customer data to redact; the request is acknowledged and logged.
- shop/redact — when Shopify sends this webhook after you uninstall the App, all data associated with your shop is permanently deleted from our systems within 30 days of uninstall.
Data location
App data is stored and processed in the United States.
Subprocessors
We use the following service providers to operate the App:
| Subprocessor | Purpose |
|---|---|
| Fly.io | Application hosting |
| Neon | Database |
| Upstash | Caching |
| Cloudflare | CDN and object storage |
| Resend | Transactional email (sending purchase orders and notifications) |
| Sentry | Error monitoring |
Data retention
We retain your data for as long as the App is installed on your store so that your purchase order history, supplier records, and cost data remain available to you. After you uninstall the App, all shop data is permanently deleted within 30 days, triggered by Shopify's shop/redact webhook. Limited records may be retained longer where required for legal, accounting, or fraud-prevention purposes.
Your rights
As a merchant, you can:
- request a copy of the data we hold about your shop;
- request correction of inaccurate data;
- request deletion of your data (uninstalling the App also triggers deletion, as described above);
- ask questions about how your data is processed.
To exercise any of these rights, contact us at privacy@veltriolabs.com. We respond to verified requests within 30 days.
Security
Data is encrypted in transit (TLS) and at rest by our hosting and database providers. Access to production systems is limited to authorized personnel and protected by authentication.
Changes to this policy
We may update this policy as the App evolves. Material changes will be reflected by an updated effective date on this page, and we will notify you of significant changes through the App or by email.
Contact
For privacy questions or requests, email privacy@veltriolabs.com.
Veltrio Labs LLC, a Wyoming limited liability company.