Privacy Policy

HubStock ‑ Multi‑Store Sync · Last updated: August 31, 2026

HubStock ‑ Multi‑Store Sync ("HubStock", "we", "us") is a Shopify app that keeps inventory, products and orders in sync across a merchant's connected stores. This policy describes what data the app processes, why, and how it is protected and deleted. It applies to merchants who install the app. We do not sell data, show ads, or use data for any purpose other than operating the app.

Data we collect and store

• Store information — your store domain and name, and the store contact details Shopify shares with installed apps (store email, phone, address and owner name). Your HubStock plan is read live from Shopify each time it is needed and is not stored.
• Catalog data — products, variants, SKUs, barcodes, prices, product media (file names, alt text and URLs), inventory quantities, and your store locations including each location's name, address and phone number.
• Order data — order number, line items (product, SKU, quantity, price), financial and fulfillment status, totals, currency, discount codes, payment gateway names, tags, and fulfillment records including shipment tracking numbers and tracking URLs. This is required to deduct sold stock from the master store and to restore it when an order is cancelled.
• Sync history — an audit log of the inventory movements the app performed: product title, SKU, quantity before and after, location and store names, the originating order reference, and whether the operation succeeded.
• App configuration and operational records — your sync settings and field mappings, the links between master and connected products, variants and locations, store connection records (including the one-time pairing codes used to connect a store), background job and alert bookkeeping, and admin session identifiers.

Customer personal data

HubStock does not request Shopify's protected customer fields and stores no customer personal data: customer names, email addresses, phone numbers and billing or shipping addresses are excluded from the order data the app keeps, and are never copied onto the mirrored orders the app creates on your master store. Webhooks Shopify sends to the app may transiently contain such details in their payload; those fields are not persisted, and stored compliance-webhook payloads are reduced to non-identifying references. Note that shipment tracking numbers, which the app stores as part of fulfillment records, can identify a delivery through the carrier's own website.

Shopify privacy webhooks

The app receives and processes Shopify's three mandatory privacy webhooks:

• customers/data_request — because HubStock stores no customer personal data, there is no customer data to return. Each request alerts us so we can confirm this to the merchant in writing; you may also contact us directly at any time.
• customers/redact — the stored webhook payload is reduced to non-identifying references. No customer fields are held in the app's own records, so there is nothing further to erase.
• shop/redact — triggers the full purge described below.

How data is used

Solely to provide the app's features: importing your catalog, syncing products and inventory to connected stores, deducting and restoring master stock for orders, showing sync history and health status, and enforcing your plan's limits. We do not use your data for advertising or profiling and we do not sell or rent it to anyone.

Service providers (subprocessors)

• Gadget (gadget.dev) — the hosting platform the app runs on; stores the data described above. Gadget states that data is encrypted at rest.
• Sentry — error monitoring for both the app's backend and its admin interface. It receives technical error reports, which include the store domain, the page address, browser type and IP address as seen by Sentry, and the surrounding diagnostic context such as product and order identifiers.
• Crisp — in-app support chat. Crisp's script loads inside the app and sets cookies and browser storage on your device; it receives your store domain, plan name, number of connected stores, your chat messages, and standard connection information such as IP address and browser type.
• Telegram — internal operational alerts to our team (for example, a store's sync is failing). Alerts reference your store domain and name, plan, affected order numbers and product SKUs — never customer personal data.
• Email — if you contact support by email, that correspondence is handled by our email provider.

Data retention and deletion

When you uninstall HubStock from a store, the app immediately removes that store's settings, its product, variant and location mappings, its location records and its store connection record. Shopify then sends a shop/redact request about 48 hours after uninstall, and that purges everything remaining for the store: the mirrored catalog, orders, fulfillments, inventory records, files and sync runs. A weekly sweep removes any data left behind by a store that was disconnected without a completed cleanup.

One exception, so it is stated plainly: entries in a master store's sync history that record real stock movements caused by a connected store are kept when that connected store is disconnected. They are unlinked from the store and retain only the store's name, product title, SKU, quantities, location names and the originating order reference. They are deleted when the master store itself uninstalls the app or is redacted.

Sync history is capped according to your plan and older entries are removed on a rolling weekly basis. Entries recording a failed sync are retained as a diagnostic record until the store uninstalls. You can email us at any time to request deletion.

Security

All data is transferred over HTTPS and is stored by our hosting provider, which states that data is encrypted at rest. Access to production data is limited to the app developer and used only to operate and support the app.

Changes to this policy

If we materially change what data the app processes, we will update this page and the "Last updated" date above before the change takes effect.

Contact

Questions or requests about your data: [email protected]