Privacy policy
Last updated September 30, 2026
Mint Stock Forecast is a Shopify app made by Mint Labs ("we", "us"). It forecasts a merchant's stock from their Shopify orders and inventory. This policy explains what the app handles about merchants and about the merchant's customers, why, and when it's deleted. For information about the merchant's orders we act as a service provider (processor) to the merchant, who is the controller.
The short version
- The app reads orders only to count units sold. For each order line it keeps the Shopify order ID, line item ID, product variant ID, the order date, the quantity and the location that fulfils it. It never reads or stores customer names, email addresses, phone numbers, addresses, prices or payment details.
- Sales older than 60 days are deleted automatically.
- We never sell or share data, use it for advertising, or combine it across stores. The app adds nothing to your storefront and sets no cookies there.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To read products, stock, locations and orders, and to receive Shopify's notifications (inventory changes, new orders, finished exports). |
| Store name, store email address and time zone from Shopify | To show dates in the store's time zone and, if the merchant turns on the daily digest, as the default address it's sent to. |
| Products and variants: titles, SKUs, vendor, product type, status, collections, whether inventory is tracked; stock per location (available and incoming); location names | To calculate and show forecasts, filters and purchase orders. |
| Forecast settings, vendor and product rules, and the digest address the merchant enters | To calculate forecasts the way the merchant wants and send the digest. |
| Plan and subscription status | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Status of exports, notifications and the last digest email | To tell the merchant in the app if something isn't working. |
Information about the merchant's orders and customers
| Information | How it's used | Kept |
|---|---|---|
| For each order line: order ID, line item ID, variant ID, order date, quantity after refunds, fulfilling location; the order's cancelled and test flags | Counting units sold per variant per day (and per location) — the sales history every forecast is based on. Cancelled and test orders are not kept. | 60 days |
| Customer names, email addresses, phone numbers, addresses, prices, payments | Not requested from Shopify. | Never held |
| IDs of orders named in a customer erasure request | So those orders are never stored again. | Until the store is deleted |
| Notification IDs from Shopify | So a repeated notification isn't processed twice. | 7 days |
Customer privacy requests
- Access requests (Shopify's
customers/data_request): the app home shows the request and the merchant downloads what we hold for the listed orders (the order-line data above) to send to the customer. - Erasure requests (
customers/redact): we delete the stored order lines for the listed orders and never store those orders again. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store.
The only email the app sends is the optional daily low-stock digest (Pro, off by default), to the merchant's own address, through Cloudflare Email Service. It lists variants to reorder. Every digest has a link to turn it off. Email addresses and message contents are not logged.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database, queues and email sending) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Order exports are downloaded from Shopify's signed links and not kept after they're imported. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Order-line data is deleted once it's older than 60 days. Notification IDs are deleted after 7 days. Access tokens are deleted as soon as the app is uninstalled; everything else for the store is deleted when Shopify sends the store deletion request 48 hours later.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; customers should contact the store they ordered from, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com