Privacy Policy

Last updated: July 12, 2026

1. Introduction

Stocklet ("we," "our," or "us") provides a Shopify application that captures customer email addresses and, where the customer explicitly opts in, mobile phone numbers on sold-out product variants, and sends transactional back-in-stock notifications by email and text message when inventory returns. This Privacy Policy describes what information we collect, how we use it, and how we protect it.

Text messaging is a regulated channel. If you are a customer who gave us a mobile number, the section on text (SMS) notifications explains exactly what you consented to and how to stop it at any time.

By installing or using Stocklet, you agree to the practices described in this policy.

2. Information We Collect

2.1 Store Information

When you install Stocklet, we receive and store basic information about your Shopify store, including:

  • Your Shopify store domain
  • Store name and contact information
  • Shopify access tokens required for API communication

2.2 Subscriber Information

When a customer signs up on a sold-out variant in your store, we store:

  • The customer's email address
  • The customer's mobile phone number — only if they chose to be notified by text and ticked the consent checkbox. The number is normalized to international (E.164) format using the country they selected in the sign-up form, and that country selection is used only for that normalization.
  • The date and time the customer gave text-message consent, stored as a record of their opt-in
  • The Shopify variant ID they signed up for
  • The timestamp of the subscription
  • Notification status (pending, notified, when they were contacted, and whether they have unsubscribed or opted out)

A customer who chooses email only never has a phone number stored. A customer who chooses text only never has an email address stored. We reject and do not store any phone number submitted without an explicit consent tick.

We do not collect names, IP addresses for marketing, behavioral tracking pixels, or any other customer PII beyond what is voluntarily entered into the back-in-stock form.

2.3 Inventory and Product Data

We receive inventory level events from Shopify webhooks to determine when to send notifications. We store minimal product and variant metadata (titles, variant IDs, inventory quantities) necessary to match subscribers to the correct restock events.

2.4 Activity Logs

We maintain operational logs of webhook deliveries, notification sends, and admin actions with timestamps for troubleshooting and support.

2.5 Billing Information

Subscription and billing are managed entirely through Shopify. We store your plan name and billing cycle dates but do not process or store payment card information.

3. Text (SMS) Notifications and Your Phone Number

3.1 Consent

We only collect a mobile number when a customer actively chooses the "Text" or "Both" option on a sold-out product and ticks a required consent checkbox next to the number field. Consent is never pre-checked, never bundled into the email sign-up, and is never a condition of purchasing anything. We record the moment consent was given.

3.2 What We Send

A phone number given to Stocklet is used for one purpose: sending an automated text message telling that customer the specific product they asked about is back in stock. We do not send marketing texts, promotions, recurring campaigns, or messages about other products, and we do not text customers on behalf of any party other than the store they signed up on. Message and data rates may apply, as stated at the point of sign-up.

3.3 Opting Out

Customers can reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any Stocklet text to opt out. Opt-outs are honored immediately and are also enforced at the carrier level by our messaging provider. Because Stocklet sends from a shared sender, an opt-out ends Stocklet text messages from every store, not just the one that triggered the message. Replying START re-opens the channel. Replying HELP returns contact information. We do not charge for these replies; standard carrier rates may apply.

3.4 Sharing of Mobile Numbers

We do not sell, rent, or share mobile phone numbers or text-message opt-in data with third parties or affiliates for their own marketing purposes. Phone numbers are disclosed only to Twilio, our messaging provider, strictly to deliver the message the customer asked for.

4. How We Use Your Information

We use the collected information to:

  • Deliver back-in-stock notifications, by email or text, to customers who signed up on sold-out variants
  • Detect inventory changes and match restocks to the correct pending subscribers
  • Display pending and notified subscribers in your Shopify admin dashboard
  • Honor unsubscribes and text-message opt-outs, and keep a record that consent was given and later withdrawn
  • Manage your subscription and plan allocation
  • Troubleshoot issues and provide customer support

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data is only shared with:

  • Shopify — through their Admin API and webhooks to read inventory, verify storefront requests, and display admin dashboards
  • Resend — our transactional email provider, which delivers restock notifications on our behalf and handles bounces and delivery tracking
  • Twilio — our text-message provider, which receives the customer's mobile number and the restock message in order to deliver it, and which processes inbound STOP/START/HELP replies to enforce opt-outs

These integrations are essential to the core functionality of Stocklet and only transmit data necessary for sending notifications.

6. Data Security

We take the security of your data seriously:

  • All storefront form submissions are HMAC-verified through Shopify's App Proxy before any data is written
  • All data is transmitted over HTTPS encrypted connections
  • Database access is restricted and secured
  • Inbound text replies are verified against our messaging provider's cryptographic signature before we act on them, so an opt-out cannot be forged
  • Phone numbers are redacted in our application logs
  • We follow security best practices for application development and deployment

7. Data Retention and Deletion

We retain your data only as long as Stocklet is installed on your Shopify store. When you uninstall Stocklet:

  • All your data — including your store information, subscribers, their email addresses and phone numbers, and activity logs — is permanently deleted within 48 hours
  • We listen for Shopify's app/uninstalled webhook and begin automated deletion immediately

We also honor Shopify's mandatory privacy webhooks. When a store owner or customer requests erasure through Shopify, we delete the matching subscriber records — matched on email address and on phone number — for that store.

8. Your Rights

8.1 Merchants

You have the right to:

  • Access the data we hold about your store and subscribers
  • Delete individual subscribers from the admin dashboard
  • Delete all your data by uninstalling Stocklet from your Shopify store
  • Request a copy of your stored data by contacting us

8.2 Customers

If you signed up to be notified about a product, you have the right to:

  • Stop text messages at any time by replying STOP to any message we send you
  • Stop emails at any time using the unsubscribe link in any message we send you
  • Request access to, or deletion of, the email address and phone number we hold for you — either through the store you signed up on, or by contacting us directly at the address below

9. Cookies and Tracking

Stocklet does not use cookies for tracking or advertising. Session cookies required by Shopify for authentication are managed by the Shopify platform. We do not use any third-party analytics or tracking tools within the app.

10. Children's Privacy

Stocklet is a business tool intended for use by Shopify store owners. We do not knowingly collect information from children under the age of 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you through the app or by other appropriate means. Your continued use of Stocklet after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

support@stocklet.io