Privacy Policy

Last updated: March 2026

StreamStock ("we", "our", "us") operates the inventory analytics platform at streamstock.io. This Privacy Policy explains how we collect, use, and protect your data when you use our Shopify application.

1. Data We Collect

When you install StreamStock on your Shopify store, we access and store the following data:

• Store information — Shopify store name and domain
• Product catalog — SKU, title, price, and inventory levels for each product
• Order history — Aggregated daily sales volumes (not individual customer orders)
• Inventory snapshots — Periodic snapshots of stock levels across your catalog
• Warehouse locations — Configured warehouse and fulfillment location data

2. How We Use Your Data

We process your store data solely to provide inventory analytics and forecasting features, including:

• Inventory demand forecasting and trend analysis
• ABC product classification based on sales velocity and revenue contribution
• Product health scoring and performance metrics
• Dead stock and slow-moving inventory detection
• Automated restock recommendations and reorder point calculations

3. Third-Party Services

We use the following third-party services to operate StreamStock:

• Stripe — Payment processing for paid subscriptions. Stripe handles all billing data directly and is PCI-DSS compliant. We do not store your payment card details.
• Moonshot AI — Powers the optional AI chatbot feature. If you use the chatbot, relevant inventory context may be shared with Moonshot AI to generate responses.

4. Data Storage & Security

Your data is stored in a PostgreSQL database hosted on a secure virtual private server. All Shopify access tokens are encrypted using AES-256-CBC encryption before storage. Communication between StreamStock and Shopify occurs exclusively over HTTPS.

5. Data Retention & Deletion

Your data is retained for as long as the StreamStock app remains installed on your Shopify store. When you uninstall the app:

• Your store is immediately marked as inactive
• Full data deletion occurs within 48 hours via Shopify's shop/redact webhook
• All stored inventory data, snapshots, and analytics are permanently removed

6. GDPR Compliance

StreamStock implements all Shopify mandatory privacy webhooks to ensure GDPR compliance:

• Customer data request — We respond to requests for any customer data we hold (we hold none)
• Customer data deletion — We process deletion requests for any customer-related data
• Shop data deletion — All store data is purged within 48 hours of app uninstallation

You may request a full export or deletion of your data at any time by contacting us at hello@streamstock.io.

7. Cookies & Local Storage

StreamStock does not use tracking cookies. For authentication, we store a JWT token in your browser's localStorage. This token is used solely to maintain your authenticated session and contains no tracking data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the application or via email. Continued use of StreamStock after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at hello@streamstock.io.