In short
- About shoppers, the app stores only email addresses, the shopper's language and what they ordered or asked to be told about. It never stores names, phone numbers, postal addresses or payment card details.
- Email addresses are used only to send the emails a pre-order or a restock alert needs. The app sends no marketing.
- We do not sell personal data and do not use it for advertising or profiling. The storefront part of the app sets no cookies.
- The app and its database run in the United States, on Render and Neon. Emails are sent through Resend.
- Old data is removed on a schedule, a shopper's data is erased when Shopify asks, and everything stored for a shop is deleted when Shopify asks 48 hours after the app is uninstalled.
Who is responsible
Shipby Preorder Back in Stock ("Shipby", "the app") is made and operated by Nexus Logic Systems, Mostaganem, Algeria ("we", "us"). For any question about this policy, write to support@nexuslogicsystems.com.
Who this policy is for
- Merchants: shops that install Shipby from the Shopify App Store.
- Pre-order buyers: people who buy a product from a merchant on pre-order.
- Back-in-stock sign-ups: people who leave their email address on a sold-out product to be told when it is back.
For the personal data of buyers and sign-ups, the merchant decides why and how the data is used: the merchant is the controller. We handle that data only to provide the app to the merchant, on the merchant's instructions, as the merchant's processor. If you are a shopper and have a question or a request about your data, please contact the shop first. We help the shop answer you.
What the app stores
About pre-order buyers
| Data | Why it is stored |
|---|---|
| Order ID and order number | To hold the pre-order items of that order and release them, oldest order first, when stock is received. |
| The pre-ordered items | Product variant, quantity, the pre-order offer and the ship-by date the buyer was promised. |
| Email address and language | Taken from the order, to email the buyer when the pre-order is being prepared, when an incoming-stock date moves, and before a balance is charged. |
| Balance, when the shop takes deposits | The amount still owed, its currency, when it is due, and the payment status and reference Shopify returns. Shipby never receives card numbers: the balance is charged through Shopify, with the payment method Shopify kept at checkout. |
About back-in-stock sign-ups
| Data | Why it is stored |
|---|---|
| Email address | To send one email when the product is back in stock. |
| Product and variant | So that the email is about the right item. |
| Language | As reported by the store's page when the shopper signed up. |
| Marketing choice | Whether the shopper ticked the optional "news and offers" box, when the shop shows it. The choice is passed to the merchant in the export; Shipby itself never sends marketing. |
| Status and dates | Waiting, emailed or unsubscribed, with the dates, so that nobody is emailed twice for one sign-up. |
| A random unsubscribe code | So that the link in the email can stop that one sign-up without an account. |
About the merchant's shop
| Data | Why it is stored |
|---|---|
| Shop domain, name, contact email and currency | To work in the right currency and to send the merchant notices, such as a failed balance charge or the monthly plan limit being reached. |
| Shopify access token | The store-level access Shopify issues to the app. Shipby does not store the names or email addresses of the staff who open it. |
| Settings | Sender name, reply-to address, people to email per unit restocked, handling time, balance reminder days, locations, and the shop's own sending domain if one is set up. |
| Pre-order offers | Their names, products, dates, limits and stock counts. |
| Plan and monthly count | The shop's plan and the number of pre-orders taken in the month, to apply the plan. |
| Email log | For each email sent: the recipient address, the subject, and whether it was accepted for delivery. |
The app does not store shoppers' names, phone numbers, postal addresses, dates of birth, payment card or bank details, or passwords.
What the app reads without keeping
To do its work, the app reads from the shop: products and variants, stock levels, locations, incoming inventory transfers and shipments, and the orders and fulfillment orders that contain pre-order items. From an order it keeps only what is listed above.
The app asks the merchant for permission to: read and update products and their purchase options; read inventory, locations, incoming transfers and shipments; read orders and fulfillments; hold and release fulfillment orders; and receive the back-in-stock form through the store's own address.
The app writes into the shop: the pre-order purchase option on chosen products, whether a sold-out variant can keep selling, a small piece of data on each variant that the product page reads, and holds on pre-order items. Shopify keeps that data under the merchant's own agreement with Shopify.
The emails it sends
- To shoppers: the back-in-stock alert, with an unsubscribe link; "your pre-order is being prepared" when the stock arrives; a new date if an incoming-stock date moves; and, when the shop takes deposits, a reminder before the balance is charged.
- To the merchant: a notice when a balance could not be collected, and when new pre-orders pause because the monthly plan limit is reached.
Emails to shoppers are sent in the shop's name, from Shipby's sending address or from the shop's own domain if the merchant sets one up. Replies go to the shop.
What we do not do
- We do not sell personal data.
- We do not use personal data for advertising or for profiling.
- We do not send marketing to shoppers, and do not add sign-ups to any mailing list.
- We do not make automated decisions about a person that have a legal effect. Pre-orders are released in the order they were placed.
- The storefront part of the app sets no cookies and stores nothing in the shopper's browser.
Where the data is kept
The app's server and database are in the United States, emails pass through Ireland or the United States as shown above, and we are based in Algeria. Personal data may therefore be handled outside the country where the shopper or the merchant lives. A merchant who needs a data processing agreement for this can ask for one at support@nexuslogicsystems.com.
How long it is kept
| Data | How long |
|---|---|
| Email log | 90 days. |
| Back-in-stock sign-ups | Deleted 12 months after the alert was sent, or 12 months after the sign-up if the shopper unsubscribed. A sign-up still waiting is kept while the shop uses the app. |
| Buyer email on finished pre-orders and balances | Removed 12 months after the pre-order was released, shipped or cancelled, or the balance was paid, failed or cancelled. The pre-order record itself stays for the merchant's accounts, without the email address. |
| Records of Shopify notices received | 30 days. They hold technical IDs only. |
| Everything stored for a shop | Until Shopify asks the app to erase the shop, 48 hours after uninstall. |
| Server logs | Kept by our hosting provider for a limited time, at most 30 days. |
| Database history kept for recovery | Kept by our database provider for a limited time, at most 30 days. |
Server logs record, for each request, its method, the address requested, the status and the time it took. They contain no email addresses. For storefront requests the address includes the parameters Shopify adds, which can include the ID of a logged-in customer, and an unsubscribe link includes its random code.
Requests from shoppers, and how erasure works
A shopper can ask the shop to see or to erase their data. The shop sends the request through Shopify, and Shopify passes it to the app.
A copy of the data
The merchant can download every back-in-stock sign-up from the app (Back in stock, Export CSV): email address, product, variant, status, marketing choice, language and dates. A buyer's pre-order details are part of the Shopify order, which the merchant already holds.
Erasing a shopper
When Shopify asks the app to erase a customer, the app:
- deletes that email address's back-in-stock sign-ups;
- removes the email address from that shopper's pre-orders and balances, and from the orders Shopify lists in the request;
- deletes the email log entries sent to that address.
What remains is the pre-order record without the email address: order number, items, quantities and dates, which the merchant needs to ship what was paid for.
Unsubscribing
Every back-in-stock email has an unsubscribe link. It stops that alert at once, without an account.
Your rights
Depending on where you live, you may have the right to see, correct, erase or restrict the use of your personal data, to object to its use, to receive it in a portable form, and to complain to your data protection authority. Shoppers: please send your request to the shop. Merchants: write to support@nexuslogicsystems.com. We answer within 30 days.
When you uninstall
When a merchant uninstalls Shipby, the shop's access token is deleted at once and all scheduled work for that shop stops. The shop's records are kept for 48 hours, so that a reinstall can pick up where it left off. After 48 hours Shopify asks the app to erase the shop, and the app then deletes everything it stores for it: settings, offers, pre-orders, balances, back-in-stock sign-ups, the email log and the records of Shopify notices.
Every notice from Shopify is checked for Shopify's signature before the app acts on it.
Security
- All traffic between Shopify, the app's server, the database and the email provider is encrypted in transit, and the database is encrypted at rest.
- Requests from the Shopify admin are accepted only with a valid session token from Shopify. The back-in-stock form is accepted only through the store's own address, with Shopify's signature.
- Product names and links in emails are read from Shopify, never taken from the shopper's browser.
- Each shop's data is kept apart from every other shop's.
- Only the developer has access to the systems, for support and maintenance.
No system is perfectly secure. If we learn of a breach that affects personal data handled for a merchant, we tell the merchant without undue delay.
Children
The app is a tool for businesses. It is not directed at children, and we do not knowingly collect data from children.
Changes to this policy
When we change this policy, we publish the new version on this page with a new effective date. If a change is important for merchants, we also tell them in the app or by email.
Contact
Nexus Logic Systems
Mostaganem, Algeria
support@nexuslogicsystems.com
This policy describes the Shopify app Shipby Preorder Back in Stock. It does not describe the website nexuslogicsystems.com.