This Privacy Policy explains how Skanley (the “App”) handles information when you install and use the App in your Shopify store. The App is provided by Ho Hin Tang, a sole proprietor carrying on business as DOUBLE H TECH (“DOUBLE H TECH,” “we,” “us,” or “our”).
This Privacy Policy applies to merchants who install or use the App, and to information accessed, processed, or stored through the App in connection with a merchant’s Shopify store.
Merchant data remains the merchant’s data. We do not claim ownership of merchant store data, order data, product data, supplier data, purchase order data, inventory data, fulfillment data, or customer-related information processed through the App.
Information we access
Skanley requests the Shopify permissions that are reasonably needed to provide its app functionality. Depending on the features you use, the App may access, process, or store the following types of information.
1. Store and account information
We may access or store information about your Shopify store and app installation, including:
- Shopify store domain and store identifier.
- App installation and session information.
- App permission and access-scope information.
We use this information to authenticate your store, operate the App, manage app sessions, verify permissions, and provide merchant-specific functionality.
2. Staff user information
Shopify may provide limited staff user information through its app session/authentication system. This may include:
- Shopify user ID.
- Name.
- Email address.
- Locale.
- Account-owner or collaborator status.
- Related session information.
We use this information for authentication, access control, session management, audit history, user identification within merchant workflows, support, security, and app operation. Some of this information may be stored in the App’s session records as part of the standard Shopify app authentication process.
3. Product, variant, barcode, and inventory information
We may access, process, or store product and inventory-related information, including:
- Product identifiers and variant identifiers.
- Product titles and variant titles.
- SKUs.
- Barcodes.
- Product status.
- Product images.
- Inventory item identifiers.
- Inventory quantities.
- Inventory levels.
- Inventory adjustment information.
We use this information to support barcode lookup, barcode conflict resolution, product lookup, inventory receiving, stock counting, purchase order workflows, and inventory synchronization.
4. Product cost information
Where available through Shopify permissions or entered by users, the App may access, process, or store product cost, unit cost, supplier cost, purchase order cost, and related pricing information.
We use product cost information to autofill cost fields, reduce manual data entry, support purchase order creation, support receiving workflows, and help merchants manage procurement and inventory operations. We do not sell product cost information or use it for advertising.
5. Location information
We may access Shopify location information, including warehouse, retail, shop, or fulfillment locations associated with your Shopify store.
We use location information because inventory receiving, stock counts, and inventory synchronization require the App to know which warehouse, shop, or Shopify location should receive or update inventory quantities.
6. Order and fulfillment information
We may access order and fulfillment-related information, including:
- Order identifiers.
- Order line items.
- Product, variant, SKU, barcode, quantity, and fulfillment information associated with orders.
- Fulfillment orders.
- Fulfillment status and fulfillment workflow information.
We use order and fulfillment information to provide the App’s pack verify feature, including scanning, checking, and verifying items during packing and fulfillment workflows. We may also use this information to support related operational workflows, troubleshooting, and merchant support.
7. Customer information
The App may access limited customer-related information only to the extent it appears in order or fulfillment information needed for packing, verification, fulfillment, or related operational workflows.
We do not use customer information for advertising, resale, profiling, or unrelated purposes.
8. Purchase order, supplier, receiving, and procurement information
If you use the App’s procurement, purchasing, supplier, receiving, or related workflow features, the App may store information that you enter into the App, including:
- Supplier names.
- Supplier contact names.
- Supplier phone numbers and email addresses.
- Supplier addresses.
- Supplier currency information.
- Purchase order numbers.
- Purchase order dates and statuses.
- Purchase order notes.
- Ordered quantities.
- Received quantities.
- Unit costs and total costs.
- Product and variant information included in purchase orders.
- Receiving sessions and receiving history.
- Stock count entries, scanned quantities, and related workflow history.
Purchase orders and supplier information are fundamental to the App’s procurement features. We use this information to create, manage, track, and receive purchase orders; manage supplier records; support procurement workflows; support inventory receiving; and synchronize received inventory counts back to Shopify when requested by the merchant.
9. Technical, diagnostic, and usage information
We may process limited technical information needed to operate, secure, troubleshoot, and improve the App, including:
- Request logs.
- Error logs.
- Timestamps.
- App events.
- Diagnostic information.
- Security and access logs.
- Browser, device, or network information where reasonably needed for operation, security, or troubleshooting.
We use this information to operate, maintain, debug, monitor, secure, and improve the App.
How we use information
We use information accessed, processed, or stored through the App to:
- Authenticate your Shopify store and authorized users.
- Provide app features requested by the merchant.
- Match scanned barcodes to Shopify products and variants.
- Surface clear choices when a barcode matches more than one item.
- Support barcode lookup, barcode management, and barcode conflict-resolution workflows.
- Support pack verify workflows using order and fulfillment information.
- Support procurement, purchase order, supplier, receiving, and stock count workflows.
- Autofill product cost information where available and authorized.
- Read and update inventory information where required by the App’s features.
- Synchronize received counts or inventory adjustments to the correct Shopify location.
- Maintain app sessions, access control, audit history, and security records.
- Operate, maintain, troubleshoot, secure, and improve the App.
- Communicate with merchants about support, technical issues, security issues, or app-related matters.
- Comply with legal obligations and enforce our rights.
Shopify permissions and minimum necessary access
We aim to request only the Shopify permissions reasonably needed to provide the App’s features. Some Shopify permissions may allow access to broader categories of Shopify data, but we use accessed data only for the purposes described in this Privacy Policy and to provide, maintain, secure, troubleshoot, and support the App.
The App may request permissions related to products, orders, fulfillment, inventory, and locations because these permissions are needed for core features such as barcode lookup, pack verify, procurement, receiving, stock counts, cost autofill, and inventory synchronization.
Information we do not intentionally collect
The App does not need payment card information and does not intentionally collect or store customer payment card details.
The App is intended for merchant business operations and is not designed to collect sensitive personal information unrelated to those operations.
Cookies and similar technologies
The App may use cookies, session tokens, local storage, or similar technologies that are necessary for authentication, session management, security, and app operation. These technologies are used to keep merchants signed in, maintain app sessions, protect the App, and provide core functionality.
Merchant responsibility
Merchants are responsible for ensuring that they have the necessary rights, permissions, and legal basis to provide information to the App, including supplier information, staff information, customer-related order information, product information, inventory information, location information, and procurement information.
Data sharing
Merchant data is used to operate the App and is not sold.
We do not sell merchant data, customer data, order data, product data, product cost data, supplier data, purchase order data, inventory data, or fulfillment data. We do not use this information for third-party advertising.
We do not share merchant data with third parties except:
- With service providers who help us host, operate, monitor, secure, troubleshoot, or support the App.
- As needed to provide the App’s core functionality.
- As required by law, legal process, regulation, or governmental request.
- To protect our rights, security, users, merchants, or the App.
- With your consent or at your direction.
Service providers are permitted to process information only as needed to provide services to us and are expected to protect the information under appropriate confidentiality and security obligations.
Service providers
The App relies on third-party service providers to operate, host, secure, monitor, support, and maintain the App. These providers may process information only as needed to provide their services to us and to support the operation, security, maintenance, and improvement of the App.
Current service providers may include:
- Shopify — app platform, Shopify APIs, authentication, app installation, merchant store data, products, inventory, orders, fulfillment, and location data.
- Render — application hosting and backend infrastructure.
- Supabase — database hosting and data storage.
- Sentry — error monitoring, diagnostics, and application performance/error reporting.
We may update this list from time to time as our service providers change.
Data retention and deletion
We retain information only for as long as reasonably needed to provide the App’s functionality, operate and improve the App, maintain security, resolve disputes, comply with legal obligations, and keep ordinary business records.
When you uninstall the App, we stop accessing your store’s data through Shopify. After uninstall, Shopify may send us a shop data deletion request, such as a shop/redact privacy webhook. We generally delete or de-identify app-related merchant data within 30 days after receiving a valid Shopify shop data deletion request, unless retention is reasonably needed for legal obligations, security, backup recovery, dispute resolution, fraud prevention, support history, or ordinary business records.
Some information may remain in encrypted backups, logs, or archival systems for a limited period before being deleted through normal backup or log-retention cycles.
Security
We take reasonable administrative, technical, and organizational measures designed to protect information accessed, processed, or stored through the App. These measures may include access controls, credential protection, secure hosting practices, monitoring, logging, and other safeguards appropriate to the nature of the App.
No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect merchant data using commercially reasonable practices.
Your choices and privacy requests
You can control the App’s access by managing app permissions or uninstalling the App from your Shopify admin.
You may contact us to request access, correction, deletion, or export of information associated with your use of the App. We will respond to reasonable requests in accordance with applicable law and Shopify platform requirements, subject to legal, security, technical, backup, and legitimate business-record limitations.
We may also receive privacy-related requests through Shopify, including requests related to customer data, shop data, or app uninstall events. We will process these requests in accordance with applicable law and Shopify platform requirements. For shop data deletion requests, our deletion timeline is measured from receipt of the valid Shopify deletion request rather than from the uninstall date itself.
Shopify and third-party services
The App operates with Shopify and may rely on Shopify APIs, Shopify authentication, and Shopify app platform features. Your use of Shopify is governed by Shopify’s own terms and privacy policies.
The App may also use third-party service providers for hosting, database, infrastructure, monitoring, logging, support, security, or similar operational services, as described above.
International processing
Information may be processed or stored in Canada, the United States, or other locations where we or our service providers operate. These locations may have data protection laws different from those in your jurisdiction.
Children’s information
The App is intended for use by businesses and is not directed to children. We do not knowingly collect personal information from children through the App.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Continued use of the App after changes take effect means the updated Privacy Policy applies to your continued use of the App.
Contact us
If you have questions about this Privacy Policy or how Skanley handles data, contact:
DOUBLE H TECH
Ho Hin Tang, sole proprietor carrying on business as DOUBLE H TECH
Email: doublehtech.ca@gmail.com