Dray Restock — Privacy Policy
Effective date: 2026-06-11 · Last updated: 2026-06-11
This policy explains what data the Dray Restock app (“the app”, “we”, “us”) accesses, why, who we share it with, and how we keep it. It is written to match exactly what the app does. By installing or using Dray Restock, you agree to this policy.
Who we are
Dray Restock is operated by Dray Labs. For any privacy question or request, contact us at israelexellence@gmail.com. The app runs at https://app.draylabs.cloud.
What we access and why
When you install Dray Restock on your Shopify store, we read the following from your Shopify store to provide restock recommendations and purchase orders:
- Products and variants — titles, SKUs, images, and unit cost — to show what you stock and to build purchase orders.
- Inventory levels — on-hand quantities — to calculate what is running low.
- Order timing for sales velocity — order dates and, per order line, the product variant and quantity sold. We use these only to calculate how fast each product sells. We summarize them into a daily count of units sold per product and do not keep individual orders or order numbers.
- Your subscription status — to know whether you are on the Free or Pro plan.
- Store settings — your store’s time zone and currency.
We do not collect your customers’ personal data
Dray Restock does not request, receive, or store any of your shoppers’ personal information. We do not store customer names, emails, addresses, phone numbers, customer IDs, order IDs, or order totals. The only order information we use is the date, the product variant, and the quantity — which we reduce to aggregate sales counts.
Information you provide
- An email address where you want your weekly restock summary sent.
- Supplier names and email addresses you add so we can address and send purchase orders.
Credentials
To connect to your store, Shopify provides us an access token, which we store so the app can read your products and adjust inventory when you receive a purchase order. This token is managed by Shopify’s standard app framework. We may also receive your name and email address from your Shopify login session; if we do, they are stored encrypted.
How we use your data
- To rank what to reorder, when, and how much.
- To create purchase orders, generate a PDF, and (if you choose) email it to your supplier.
- To send your weekly restock summary email, if you enable it.
- To adjust your Shopify inventory when you mark purchase-order items as received.
We do not use your data for advertising, profiling, or any automated decision-making about your shoppers, and we do not run any analytics or tracking on shopper behavior.
Who we share data with (sub-processors)
We share data only with the services required to run the app:
- Shopify — the platform your store and our app run on; the source of the store data above and the destination of inventory adjustments you make.
- Hostinger — hosts our application and database servers, so your stored data resides on Hostinger infrastructure.
- Resend — sends our emails. When you send a purchase order, Resend receives the supplier’s email address and the PO email and PDF (line items, quantities, unit costs, totals, notes, and your store name). When you enable the weekly summary, Resend receives your chosen email address and the summary content (product names, days of stock left, suggested quantities, dead-stock figures). No customer/shopper data is ever sent, because we hold none.
We do not sell your data, and we do not share it with anyone for their own marketing.
Our servers and sub-processors may store or process this data in countries other than your own.
How long we keep data and how it is deleted
- When you uninstall the app, we immediately delete the stored access credentials for your store, and we permanently delete all of your remaining data (products, sales aggregates, purchase orders, suppliers) within 30 days.
- If Shopify sends us a shop data-erasure request (
shop/redact), we delete all of your store’s data immediately.
- We honor Shopify’s mandatory privacy webhooks:
- Customer data request — we confirm that we hold no customer data.
- Customer redaction — no action is needed because we hold no customer data.
- Shop redaction — we delete all of your store’s data, as above.
Your choices
- You can turn the weekly summary email on or off, and change its address, in the app’s Settings (every summary email also includes an unsubscribe link).
- You can uninstall the app at any time from your Shopify admin, which triggers deletion as described above.
- For any data request, contact israelexellence@gmail.com.
Security
- All data sent between the app, Shopify, our email provider, and your browser travels over encrypted (HTTPS/TLS) connections.
- Sensitive data — your Shopify access credentials, your notification email, and supplier email addresses — is encrypted (AES-256-GCM) at rest in our database.
- Incoming requests from Shopify are cryptographically verified before we act on them.
- We minimize what we collect — we never request or store your shoppers’ personal data.
- Access to our systems and database is restricted to the operation of the app.
Changes to this policy
If we change how we handle data, we will update this policy and revise the “Last updated” date above.
Contact
Dray Labs — israelexellence@gmail.com