Stocara privacy policy
Last updated: 14 September 2026
Stocara is a Shopify app that lets merchants collect and manage wholesale account applications, and give approved wholesale customers automatic trade pricing. This policy explains what the app stores, why, how long it keeps it, and who else touches it.
For the personal data of a merchant’s applicants and customers the merchant is the data controller and Stocara is their processor. We act on the merchant’s instructions and on Shopify’s.
What the app stores
About the shop. The shop’s myshopify.com domain, a Shopify API access token, and the merchant’s settings: wholesale tag, discount percentage and label, price tiers and their product and collection rates, excluded products, email templates, form branding, custom form fields, and the sender and reply-to email addresses the merchant chooses for notifications.
About wholesale applicants. What the retailer types into the form on the merchant’s storefront: company name, email address, and optionally phone number, website, a message, and answers to any custom questions the merchant has added. Alongside it we store the application’s status, the Shopify customer id once approved, and whether the approval or rejection email reached the applicant.
About approved wholesale customers. Their Shopify customer id with the price tier or individual rate assigned to them.
About orders that were priced wrongly. When a wholesale customer checks out without their trade pricing, we record the order id and number, the customer id, the order total and currency, how many lines it had, and why it was flagged, so the merchant can put it right. We do not store the email address on the order.
An access log. Who in the app read or changed applicant data and when. It holds identifiers only — a Shopify staff user id, an action name, a record id, a count — and never an email address, a name, a phone number or anything an applicant wrote.
We do not collect payment details, browsing history or location data. We do not sell personal data, and we do not share it with anyone for their own marketing.
Why we store it
- To show the merchant their wholesale applications.
- To tag approved customers in the merchant’s Shopify store so their trade pricing applies at checkout, and to write their tier onto their customer record.
- To send the applicant an approval or rejection email on the merchant’s behalf.
- To warn the merchant when an order was charged at the wrong price.
- To keep the access log, which exists so that misuse of applicant data would be visible rather than invisible.
Automated decisions
A merchant can switch on auto-approval, and it is off unless they choose it. With it on, a submitted application is approved without anyone reading it: the applicant is created or tagged as a wholesale customer in Shopify and emailed. The decision is favourable by construction — nothing in Stocara ever rejects an application automatically, and a rejection is always a person’s decision. No profiling, scoring or ranking of applicants happens anywhere in the app. An applicant who wants a human to look at their application can ask the merchant, who can change the outcome at any time.
Where data is stored, and who else touches it
The app and its PostgreSQL database run on Railway (United States). Notification emails are sent through Resend (European Union), which receives the recipient’s email address and the contents of the message. Those are our only two sub-processors. Shopify itself holds the merchant’s store data and is the platform the app runs on.
Data is encrypted in transit (HTTPS to the app, TLS to the database, encrypted private networking between the app and the database) and encrypted at rest by our hosting provider.
How long we keep it
| What | Kept for |
|---|---|
| Approved applications | While the app is installed — it is the record of why a customer is priced as wholesale |
| Rejected applications | 90 days after the rejection |
| Applications never decided | 12 months after they were submitted |
| Pricing alerts, once the merchant marks them handled | 90 days |
| Access log | 12 months |
| Customer tier assignments | Until removed by the merchant, or uninstall |
Deletion is automatic. The app sweeps each shop once a day and removes everything past its period.
Deletion on request
- Uninstall: every record for that shop is deleted — settings, sessions, applications, tiers, pricing alerts and the access log.
- Customer redaction (GDPR): when Shopify sends a customer redaction request we delete that person’s applications, matched on both their email address and their Shopify customer id, plus their tier assignment and any pricing alerts naming them or the orders in the request.
- Shop redaction (GDPR): all remaining data for that shop is deleted.
For merchants using custom form fields
Custom questions are yours to write, and what they ask for becomes your responsibility as the controller. Ask only for what you need to decide a wholesale application. Do not use them to collect payment card or bank details, government identifiers, or health information — the app rejects fields that ask for card or bank details, and the rest is on you.
Contact
For privacy questions, data requests, or to report a security issue, contact abhinavpandrate@gmail.com. Security reports are acknowledged within 24 hours.