Privacy policy for Sold Out Sink
Draft. Replace the bracketed fields before you publish this URL. This is not legal advice.
Effective date: [Month Day, Year]
Who we are: [Legal entity name] ("we") operates the Sold Out Sink Shopify app.
Contact: [privacy@your-domain.com]
Address: [Postal address]
What this app does
Sold Out Sink reorders products inside collections you choose. It moves a product to the bottom only when every variant is unavailable. It does not unpublish products, hide them from the storefront, edit product content, or read orders.
Data we store
We store merchant and catalog data needed to sort collections and bill the app:
- Shop domain, shop name, and the staff or shop contact email used for failure alerts
- Shopify offline session tokens, encrypted at rest by the host's disk, so the app can call the Admin API after you close the browser
- Collection ids, titles, handles, sort mode, and the ordered list of product ids
- Snapshots of collection order taken before each change, so you can restore
- Which products you pinned, and a short preview (product id, title, sold-out flag)
- App plan, Shopify subscription id, and subscription status
- An activity log of sorts, restores, errors, and billing events
- The time of the last check, reorder, and reconciliation
We do not request customer or order access scopes. We do not store customer names, emails, addresses, phone numbers, or order contents. Mandatory privacy webhooks are acknowledged and, because there is no customer data, they have nothing to export or delete.
Product ids and titles are catalog data, not customer personal data.
Why we use it
- To move sold-out products and put the original order back
- To show status, errors, and the activity log inside the Shopify admin
- To email you when a sort fails, if you saved an address and the host has SMTP configured
- To bill Pro through Shopify's Billing API
- To keep the app reliable (queued jobs, nightly reconciliation, operator metrics)
Operator metrics (`/metrics`) are locked with a secret token. They include shop domains, plan, collection counts, and the latest error text. They do not include access tokens or customer data.
How long we keep it
Uninstalling the app deletes the session, collection snapshots, activity log, and shop record after a best-effort restore of collection order. Shopify also sends `shop/redact`, and that request deletes anything still left. Customer privacy requests do not delete shop configuration, because we do not store customer data.
Session tokens are deleted as soon as the uninstall webhook is handled.
Who we share it with
- Shopify, which hosts the admin, OAuth, billing, and the store data the app reads
- The hosting provider (by default Fly.io) that runs the app and stores the SQLite file on a volume
- An email provider you configure (SMTP) when a failure email is sent
We do not sell data. We do not use merchant data to train public models. We do not send data to advertising networks.
Shopify billing
Pro is charged by Shopify at $7.99 USD every 30 days. We never see your card number. Cancelling inside the app, or uninstalling, stops future renewals. Shopify does not refund the current period.
International transfers
The default host region is Ashburn, Virginia, United States. If you move the app, the database moves with it. Shopify processes store data under its own terms.
Your choices
- Turn a collection off to restore its original sort and stop managing it
- Remove the failure email in the app
- Uninstall the app from Shopify admin to delete stored shop data and end billing
- Email [privacy@your-domain.com] for a copy or deletion of the merchant data above
Changes
We will update the effective date when this policy changes. The live copy is served at `/privacy` on the app host.