Privacy Policy

Last updated: 15 April 2026

Restockd ("we", "us", "our") is a Shopify application operated by Twinkle Khosla, based in Bangalore, India. This policy explains how we collect, use, store, and protect your personal information when you interact with our app.

1. What data we collect

We collect only the data necessary to provide restock notifications:

• Email address — provided when you sign up for a restock alert on a merchant's store.
• Product and variant identifiers — the Shopify product and variant IDs you requested notifications for.
• Shop domain — the Shopify store where the notification was created.
• Timestamps — when the notification request was created and when it was fulfilled.

We do not collect payment information, physical addresses, browsing history, or any data beyond what is listed above.

2. Why we collect it

We use your email address for one purpose: to send you a transactional notification when a product you requested is back in stock. We do not use your data for marketing, profiling, advertising, or any other purpose.

3. How we store it

Your data is stored in AWS DynamoDB in the us-east-1 (N. Virginia) region. Data is encrypted at rest using AWS-managed encryption keys and in transit via TLS. Access to the database is restricted to application-level credentials with least-privilege IAM policies.

4. How we use it

When a product you subscribed to comes back in stock, we send a one-time transactional email from [email protected]. After the email is sent, the notification record is marked as fulfilled.

5. Third-party services

We share data only with the following service providers, solely to operate the app:

• Shopify — we receive product and inventory data through the Shopify API, and your email address is transmitted through Shopify's storefront theme extension.
• Amazon Web Services (AWS) — we use DynamoDB to store notification records and AWS infrastructure to host the application.
• Transactional email provider — we use a third-party email service to deliver restock notification emails. The provider processes your email address solely for delivery and does not retain it for other purposes.

We do not sell, rent, or trade your personal information to any third party.

6. Data retention

Active notification records are retained until the restock email is sent. Fulfilled records are retained for up to 90 days for operational purposes (debugging, delivery confirmation), after which they are automatically deleted. If a merchant uninstalls Restockd, all data associated with that shop is deleted within 30 days.

7. Your rights

Regardless of where you are located, you have the right to:

• Access — request a copy of any personal data we hold about you.
• Deletion — request that we delete your personal data. We will comply within 30 days.
• Correction — request that we correct any inaccurate data.
• Portability — request your data in a structured, machine-readable format.
• Withdraw consent — unsubscribe from a restock notification at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. GDPR (European Economic Area)

If you are located in the EEA, our legal basis for processing your email address is your explicit consent, given when you subscribe to a restock notification. You may withdraw this consent at any time by contacting us. We process data outside the EEA (in the United States via AWS) and rely on standard contractual clauses to ensure adequate protection.

9. CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To make a request, contact us at [email protected].

10. Children's privacy

Restockd is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the merchant's Shopify admin or by email. The "Last updated" date at the top of this page reflects the most recent revision.

---

12. Contact

Twinkle Khosla
Restockd
Bangalore, India
[email protected]