Privacy Policy

Pomatic ("we", "us", or "our") is an AI-powered inventory planning application for Shopify merchants. This Privacy Policy describes how we collect, use, store, and protect information when you install and use the Pomatic app through the Shopify App Store.

By installing Pomatic, you agree to the collection and use of information as described in this policy.

When you install and use Pomatic, we collect the following categories of information from your Shopify store:

Merchant account information — Your shop domain, name, and the name and email address associated with your Shopify account. This is provided by Shopify during the OAuth authorization flow.

Product and variant data — Product titles, variant titles, SKUs, and Shopify resource identifiers. This data is synced to power inventory forecasting.

Inventory levels — Current stock quantities across your warehouse locations. Used to calculate reorder points and stockout projections.

Order aggregations — We sync the creation date and line-item quantities from your orders to compute daily sales velocity. We do not store individual order details, customer names, customer emails, shipping addresses, or any customer payment information.

Location and warehouse data — Shopify location names and addresses, used to organize inventory by fulfillment center.

Merchant-provided data — Supplier details, lead times, safety stock settings, cost-of-goods figures, and purchase order records that you enter directly into Pomatic.

Pomatic is designed with data minimization in mind. We explicitly do not collect or store:

End-customer personally identifiable information (names, emails, phone numbers, addresses) Customer payment or billing information Browsing behavior, analytics cookies, or tracking pixels Device fingerprinting or advertising identifiers

Our Shopify API access scopes are limited to: read_products, read_inventory, read_orders, read_all_orders, read_locations, and read_shipping. We do not request access to customer accounts, customer data, or payment methods.

We use the collected information solely to provide and improve the Pomatic service:

Demand forecasting — Historical order velocity and seasonality patterns are used to generate inventory projections up to 1 year out. Reorder recommendations — Inventory levels, lead times, and safety stock settings are combined to alert you before stockouts occur. Purchase order management — Supplier and cost data you provide is used to create, track, and manage purchase orders within the app. Data synchronization — We maintain an up-to-date mirror of your product catalog and inventory to ensure forecasts reflect your current store state. Service improvement — Aggregated, anonymized usage patterns may be used to improve our forecasting algorithms.

Your data is stored in a secured PostgreSQL database. We implement industry-standard security measures to protect your information, including:

Encrypted connections (TLS) for all data in transit Shopify OAuth 2.0 for authentication — we never ask for or store your Shopify password Access tokens are stored securely and scoped to the minimum permissions required Session management with automatic expiration

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

Pomatic integrates with the following third-party services:

Shopify — We use Shopify's APIs and OAuth system to access your store data and manage app billing. Shopify's use of your data is governed by Shopify's own privacy policy.

Shopify Billing — Pomatic offers a free plan at no charge. Optional Pomatic Pro subscription charges ($49/month after a 30-day free trial) are processed entirely through Shopify's billing system. We never handle your credit card or payment details directly.

We do not use third-party analytics, advertising, or tracking services within the Pomatic application.

While the app is installed — We retain your data for as long as you have Pomatic installed on your Shopify store. This is necessary to maintain forecasting accuracy, which improves with historical data.

When you uninstall — Upon uninstallation, your Shopify session and access tokens are immediately deleted. If you would like all associated data (products, inventory snapshots, purchase orders, and forecasting data) permanently removed from our systems, please contact us at the email address below and we will process your request within 30 days.

Data portability — You may request an export of your data at any time by contacting us.

To keep your data synchronized in real time, Pomatic registers the following Shopify webhooks:

orders/create — Increments daily order counts for sales velocity calculations inventory_levels/update — Updates current stock levels across your locations products/update — Syncs changes to your product catalog app/uninstalled — Triggers session cleanup when you remove the app app/scopes_update — Updates stored permission scopes if they change

These webhooks transmit data directly from Shopify to our servers over encrypted connections.

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you Correct inaccurate or incomplete data Delete your data from our systems Export your data in a portable format Object to certain processing of your data

To exercise any of these rights, please contact us using the information below. We will respond to your request within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you through the Pomatic app or via the email address associated with your Shopify account.

We encourage you to review this policy periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@pomatic.co Website: pomatic.co