Wardwell privacy policy

Privacy policy

Effective: September 26, 2026. This policy covers all five Wardwell apps — Stocklane, ExemptSafe, BulkSafe, Shipdate, and MarginFloor — and this website.

The short version: we collect the minimum data needed to run the apps, we never sell it, and we delete it when you uninstall.

What we collect

Shop data, through Shopify's API

Each app reads only the shop data its job requires — the same permissions you approve at install:

• Stocklane: inventory levels, products, locations, and order history (for sales velocity).
• ExemptSafe: customer records you mark tax-exempt, and order data for the audit log.
• BulkSafe: products and inventory it edits, plus the backups it takes before editing.
• Shipdate: products and inventory levels to compute delivery dates.
• MarginFloor: products, prices, inventory, and cost data to compute margins.

We also store your shop domain, your subscription plan and billing status (billing itself is handled by Shopify), and your app settings and rules.

Support conversations

If you contact support — including through the in-app help widget — we keep the conversation so we can help you and improve the answers. Support conversations never include your customers' personal data unless you paste it in; please don't.

Product analytics

We record anonymous usage events (things like "setup completed" or "first digest sent") to understand whether the apps are working. These events contain IDs and counts only — names, email addresses, and product titles are stripped out by an automated denylist before anything is stored.

This website

This site sets no cookies and runs no analytics. It doesn't track you.

How we use it

To operate the apps you installed — nothing else. Specifically:

• Running the features you configured (digests, rules, edits, badges, pricing).
• Keeping you logged in and your billing status correct.
• Answering support requests and fixing bugs.
• Understanding, in aggregate, whether the apps are working.

We do not sell your data. We do not share it with advertisers. We do not use it to train models for anyone else. The only third parties involved are the infrastructure the apps run on (hosting, database, email delivery), and they see data only as needed to provide those services.

How long we keep it

• Uninstall: when you uninstall an app, we delete your shop's operational data — settings, rules, logs, backups.
• Full erasure: Shopify sends us a mandatory data-erasure request 48 hours after uninstall. At that point we delete everything we hold about your shop, no exceptions.
• Anonymous feedback: if you answer an uninstall survey, we may keep the anonymous answers to improve the products. They're never tied to your shop, and they're deleted at full erasure too.

Security

Access tokens and secrets are encrypted at rest. Connections use HTTPS throughout. Our apps verify every webhook from Shopify cryptographically before acting on it.

Your rights

If you're in the EU, UK, California, or anywhere else with data-protection rights, you can ask us what we hold about your shop, ask for a copy, or ask us to delete it early — email [email protected] and we'll handle it. Your customers can exercise their rights through you as the merchant; if Shopify forwards us a customer data request or erasure for your shop, we process it as described above.

Children

Our apps are business tools for merchants, not directed at children, and we don't knowingly collect children's data.

Changes to this policy

If this policy changes in a way that matters, we'll post the update here and note the new effective date. Continued use of an app after a change means you accept it.

Contact