Privacy Policy

ShelfTally ("we," "us," or "our") is a product of Offshoot Labs. This Privacy Policy explains how we collect, use, and protect your information when you visit our website atshelftally.com and use our services.

Shopify App Data

When you install the ShelfTally app from the Shopify App Store, we collect and store the data needed to provide stock take, inventory count, and purchase-order receiving features:

• Store information — your myshopify.com domain, store locations, and an API access token that lets the app read your product catalog and read/write inventory levels on your behalf
• Product and inventory data — product titles, variants, SKUs, barcodes, and inventory quantities, read from Shopify while you perform counts
• Stocktake records — counts, scan sessions, discrepancies, and inventory adjustments you create in the app
• Purchase order and receiving records — supplier names, order lines, and received quantities you enter in the app
• Subscription status — your current ShelfTally plan, so we can enforce plan limits

The app does not request or store any data about your customers. Payments for paid plans are processed entirely by Shopify's billing system — we never see or store your payment details.

App data is stored on Cloudflare's infrastructure (Cloudflare D1 and Workers KV). When you uninstall the app, Shopify sends us a mandatory data-erasure request, and we permanently delete your store's data — including all stocktake, adjustment, and purchase-order records — in response. We also honor Shopify's customers/data_request andcustomers/redact requests; since we store no customer data, there is nothing to report or redact.

Website and Waitlist Data

When you sign up for the ShelfTally waitlist or use our website, we may collect the following information:

• Email address (required)
• Name (optional)
• Shopify store URL (optional)
• Primary track — the inventory workflow area most important to you
• Primary needs — the specific features you are looking for
• Store count — number of stores or locations you manage
• UTM parameters — campaign tracking information from the URL you used to reach our site (e.g., utm_source, utm_medium, utm_campaign)
• IP address — collected automatically by Cloudflare as part of standard web hosting and security operations
• Usage data — pages visited, referring page, browser and device type, country, and site interactions such as waitlist signups, collected through our self-hosted analytics tool (see Third-Party Services below)

How We Use Your Data

We use the data we collect for the following purposes:

• Product update notifications — to let you know when ShelfTally is ready for early access, and to share important product updates
• MVP direction validation — to understand which features and workflows matter most to potential users, so we can build the right product
• Improving the service — to analyze usage patterns and improve our website, content, and future product

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

We rely on the following third-party services to operate our website:

• Cloudflare Pages — hosts our website and serves content. Cloudflare may process your IP address and request metadata as part of its standard hosting operations. See Cloudflare's Privacy Policy.
• Cloudflare D1 — our database service, used to store waitlist signups. Data is stored within Cloudflare's infrastructure.
• Cloudflare Turnstile — a bot-protection service used to verify that waitlist signups come from real people, not automated scripts. Turnstile may set security-related cookies on your device.
• Umami Analytics (self-hosted) — a privacy-focused, cookie-free analytics platform that we host on our own infrastructure at analytics.offshoot-labs.com. It records pageviews, referring pages, browser and device type, country, and site events (such as waitlist signups). It does not use cookies, does not store your full IP address, and does not track you across other websites. See Umami's data policy for details on how the software handles data.

Data Retention

App data is retained while the ShelfTally app is installed on your store. After you uninstall, your store's data is permanently deleted when Shopify sends the mandatory shop-erasure request (typically within 48 hours of uninstall).

Waitlist data is retained until 18 months after the public launch of the ShelfTally product, or 36 months from the date of collection, whichever comes first. After this period, your data will be deleted unless you have become an active user of the launched product, in which case the product's terms will govern data retention.

Data Deletion

You may request deletion of your personal data at any time by contacting us atsupport@shelftally.com. We will process deletion requests within 7 business days.

Cookies

Our website uses only the cookies required by Cloudflare Turnstile for bot protection and security purposes. We do not use tracking cookies, advertising cookies, or analytics cookies — our self-hosted Umami analytics operates entirely without cookies.

Your Rights

Depending on your location, you may have the following rights under regulations such as the GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act):

• Right to access — you can request a copy of the personal data we hold about you
• Right to correction — you can request that we correct inaccurate or incomplete data
• Right to deletion — you can request that we delete your personal data
• Right to opt out — you can opt out of receiving product update communications at any time
• Right to data portability — you can request your data in a structured, commonly used format

To exercise any of these rights, contact us at support@shelftally.com.

Children's Privacy

ShelfTally is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16, please contact us at support@shelftally.com and we will promptly delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically to stay informed about how we handle your data.

Contact

If you have any questions about this Privacy Policy or our data practices, please contact us atsupport@shelftally.com.