Replenly ("the app," "we," "us") is a Shopify app that helps merchants manage suppliers, purchase orders, and inventory replenishment. This policy explains what data the app accesses and stores when a merchant installs it on their Shopify store.
What we access, and why
When a merchant installs Replenly, we request the following Shopify access scopes, each used only for the purpose listed:
We access
To
Products and variants
Build a local catalog cache for supplier linking, cost tracking, and replenishment calculations
Inventory levels
Show current stock and compute reorder suggestions
Locations
Let the merchant choose where purchase orders are received
Orders (aggregate quantities only)
Calculate sales velocity for replenishment suggestions
What we deliberately do NOT access or store
Replenly never reads or stores any personal customer information. When we read order data, we request only the order's internal ID, its creation date, and each line item's product and quantity — never a customer's name, email, shipping address, phone number, or any other identifying detail. We have no code path capable of retrieving that data, by design, not just by configuration.
We do not use cookies for tracking, do not run any analytics or advertising pixels, and do not sell or share data with third parties for marketing purposes.
Data we store
To provide the app's features, we store, per store:
Store settings: your store's currency, replenishment preferences (target stock cover, safety stock, sales velocity window), and subscription/billing status.
Suppliers: names, contact emails, currencies, lead times, and payment terms you enter yourself.
A local cache of your product catalog and inventory levels, refreshed periodically, used to power search and replenishment calculations without repeatedly querying Shopify.
Purchase orders and receiving history you create in the app.
Aggregated daily sales quantities per product (not individual orders or customer purchases) — used only to calculate how fast a product sells.
Your Shopify access token, used to make API calls to your store on your behalf. This is never shared with any third party.
Third-party services
Shopify hosts the platform this app runs on and is the source of all store, product, and order data described above.
Resend (resend.com) — if you choose to email a purchase order to a supplier, the PDF and the supplier's email address (which you provided) are sent through Resend's email delivery service. This feature is optional and only used when you click "Email to supplier."
Frankfurter (frankfurter.dev), a free public European Central Bank exchange-rate API — queried only for a currency pair (e.g. "USD to BRL") when a purchase order involves a foreign-currency supplier. No store-identifying or personal information is ever sent to this service.
Data retention and deletion
If you uninstall the app, all of the data described above is permanently deleted from our database automatically, without any need to contact us. If Shopify sends us a customer data request or redaction webhook, we respond immediately — as noted above, we have no customer personal data to return or redact in the first place, since we never store any.
Your rights
Since we don't store personal data about your customers, data subject requests related to your customers should be handled through Shopify directly. For questions about what Replenly stores about your store or account, contact us at support@getreplenly.com.
Changes to this policy
We'll update this page if what the app accesses or stores changes, and update the "Last updated" date above.