Information ReOrder handles
- Shopify installation and session information, including the store domain, granted scopes and administrator session details required to authenticate the app.
- Read-only Shopify product, variant, inventory, location and recent order information used for inventory planning. Customer identity is not needed for ReOrder’s inventory calculations.
- Information a merchant enters into ReOrder, such as planning settings, supplier contacts, rules and item codes, bundle recipes, demand events, stockout notes, decision overrides and purchase-order drafts.
- Support messages and technical information reasonably needed to diagnose reliability or security issues.
- The verified Shopify account-owner email used to send service release notes, plus a delivery record for each shop and release.
How the information is used
ReOrder uses this information to authenticate the store, calculate and explain replenishment recommendations, save merchant decisions, create purchase-order drafts, send weekly service release notes, provide support, maintain security and operate the service.
Recommended order quantities are calculated from transparent, merchant-visible forecasting and planning rules. Every recommendation shows the inputs used to produce it.
Ask ReOrder
ReOrder calculates the figures and evidence shown in chat. For unfamiliar phrasing, Cloudflare Workers AI processes the question and relevant recent question text to identify the requested inventory topic. ReOrder does not include catalogue records or customer records in these AI requests. Sensitive-pattern checks cannot detect every kind of personal information, so do not enter contact details, credentials or payment information.
The current tab retains up to 20 recent exchanges and the draft for eight hours, separately for the store and available user identity. New conversation clears this browser copy. Closing the tab normally clears its session storage. Request counters are stored to enforce shared usage allowances, contain no conversation text, and expired counters are removed during subsequent use.
Service providers and payment
ReOrder relies on Shopify for installation, authentication, store-data access and subscription confirmation. Application and database infrastructure is hosted with Fly.io, with the production database in Sydney. AgentMail processes the account-owner email, weekly release messages and optional urgent-warning digests. Providers may process limited information needed to deliver their services under their own contractual and privacy obligations.
The public ReOrder website does not currently use advertising trackers or third-party analytics cookies.
Website trial requests and usage measurement
When you request a guided trial, we store the business email, permanent Shopify store domain, variant-count range, optional planning-tool name and contact permission submitted through the form. We use them to assess fit and respond to your request. Submitting the form does not install the app or start billing.
The website records aggregate page-view counts and request totals by public page, broad source category and comparison topic. It does not store full referring URLs, advertising identifiers or calculator inputs. The current tab may retain the first public page and source category for up to 24 hours in session storage; this contains no visitor identifier. Page measurement respects browser Do Not Track and Global Privacy Control signals. A trial request still needs to be saved when you choose to submit it.
We may associate a request with existing in-app activity only where its store domain and email match a verified Shopify account-owner session. A page view or request is not counted as a paid subscription. Rate protection uses a short-lived keyed hash of the network address rather than saving the raw address in the acquisition tables.
Trial requests are retained for up to 90 days, aggregate daily counts for up to 395 days, and rate-limit records for up to two hours, subject to the scheduled cleanup interval. Requests matching a store are also removed by the store-data deletion workflow. Contact hello@reorderinventory.com to request deletion before installation. Public-page logs contain paths rather than submitted form contents or query strings.
Retention, deletion and security
A merchant can delete saved planning records at any time from Data and privacy inside ReOrder. Uninstalling ReOrder stops its Shopify access and deletes the shop’s active ReOrder records and sessions. Shopify’s later shop-redaction request is also handled. Deleted records can remain temporarily in encrypted infrastructure backups until those backups expire, but they are not available through the service.
ReOrder uses access controls, scoped credentials and other reasonable safeguards intended to protect information. No internet service can guarantee absolute security.
Contact
For a privacy question or data request, email hello@reorderinventory.com. Please do not send passwords, access tokens, customer personal information or payment details by email.