Last updated: September 21, 2026
This policy describes what data StockSpot ("the app," "we," "us") accesses and processes when installed on a Shopify store, and how that data is used. It applies to both the merchant who installs the app and the merchant's customers who interact with it on the storefront.
From the merchant's Shopify store (via the Shopify Admin API): store details (domain, currency, timezone, and locale), used to display data correctly and calculate shipping-vs-pickup logic; location data (names, addresses, and coordinates of the merchant's Shopify locations), used to power the store-finder and pickup-selection widget; product and inventory data (stock levels per location), used to show accurate real-time availability; and, when an order is placed with a pickup location selected, the order ID, the location, and the order's revenue amount, used to build the merchant's analytics dashboard.
We do not store the customer's name, email, shipping address, or any other personally identifying order detail.
From shoppers browsing the storefront: their approximate location, in two ways — if they use the “use my current location” button, their device's browser-reported coordinates; if they don't share their location, an approximate location may be derived from their IP address via a third-party geolocation service, or from a postal code or address they type into the search box. This is used only to sort nearby stores by distance and is not stored in our database. We also record anonymous, session-scoped interaction events (e.g. “widget viewed,” “location selected,” “added to cart for pickup”) tied to a randomly generated session identifier, not to a customer's identity, used to build the merchant's conversion-funnel analytics.
ipinfo.io — resolves an approximate location from a shopper's IP address when they don't explicitly share their location or type an address.
Google Maps / Geocoding API — converts a postal code or address a shopper types into map coordinates.
Neither service receives any of the merchant's or customers' Shopify account information — only the specific location input needed to resolve coordinates.
We do not sell or share any data collected through StockSpot with third parties, other than the geolocation services listed above, which receive only the minimum input needed to do their specific job (an IP address or typed address/postal code) — never Shopify account or order data.
We do not set a fixed retention limit on order and analytics records while your store is actively using StockSpot — that data is kept for as long as the app is installed, since it powers your ongoing analytics dashboard. There is no automatic archiving or purging of older records during that time. See “Merchant data deletion” below for what happens when the app is uninstalled.
When a merchant uninstalls StockSpot, Shopify automatically notifies us via its standard app-uninstall webhook, and we immediately and permanently delete that store's record from our database — including all associated location data and pickup/order analytics records. This happens automatically; no manual request is needed.
Questions about this policy or how StockSpot handles data can be sent to: shoaib@techcologic.com.