Privacy policy
Last updated: 12 October 2026
Restocko (“the app”) lets Shopify stores offer “notify me when back in stock” and “price drop” emails to their shoppers. The app is provided by Yeprem Mnatsakanyan (“we”). This policy explains what data the app handles, why, and what rights you have.
Who is who
- Merchant: the store that installs the app. The merchant decides to use the app on its storefront and is the controller of its shoppers’ data.
- Shopper: a person who asks to be notified about a product.
- We: process data on the merchant’s behalf to run the app.
Data we collect
From shoppers (only when they use the sign-up form on the store):
- Email address (required).
- Phone number (only if the merchant turned this field on; optional for the shopper).
- The product and variant they want to follow, the price at sign-up, and the date and time.
- Whether the shopper ticked the consent box, when the merchant requires it.
From merchants: the store’s domain, the access token Shopify issues to the app, the store’s contact email, and the app settings the merchant saves (texts, colours, sender address).
We do not read orders, customer accounts or payment details. The app only reads products and inventory. The storefront widget sets no cookies and does not track shoppers.
Why we use it
- To email the shopper when the product is back in stock, or when its price drops.
- To show the merchant how many shoppers are waiting for which product.
- To run, secure and fix the app (for example, to limit sign-up abuse).
We do not sell personal data and we do not use it for advertising.
Who we share it with
- Resend (email delivery): receives the shopper’s email address and the email content to send it.
- Hosting provider (Contabo): stores the app’s database on a server we control.
- Shopify: the platform the app runs on.
We share data with authorities only when the law requires it.
How long we keep it
- Shopper sign-ups are kept while the store uses the app, or until the shopper or merchant asks for deletion.
- When a merchant uninstalls the app, Shopify sends a request and we delete all of that store’s data.
- When Shopify forwards a customer’s deletion request, we delete that shopper’s sign-ups.
- Backups are rotated and removed within 14 days.
Your rights
Shoppers can unsubscribe at any time with the link in every email. This stops further emails for that store. Shoppers can also ask the store (or us) to access, correct or delete their data. Under GDPR and similar laws you may also object to processing or complain to a supervisory authority.
We handle Shopify’s customer data request and customer redact notices, so a shopper’s request made through the store reaches us.
Security
Data is sent over HTTPS, access tokens are stored server-side only, requests from the storefront are signed by Shopify, and the database is not exposed to the internet. No system is perfectly secure; we will tell affected merchants without undue delay if a breach affects their data.
Contact
Questions or requests: eprem2015@gmail.com