Security and your data

The short answers. The full detail is in our Privacy Policy.

Who runs ShelfTrue?

TechBridge, a business name registered in San Diego County, California, USA. Your agreement is with TechBridge. For anything about your data, write to [email protected].

ShelfTrue is new and in private beta. There are no customer reviews yet, and no independent security certification yet.

What access does it ask for?

Shopify shows you this list on its install screen before you agree. ShelfTrue asks to read:

• Products: product names, codes, prices and costs.
• Inventory: how much stock each location has.
• Locations: your store's locations.
• Orders: Shopify lets an app with this permission read your orders. We keep only the order number, times, products and quantities.
• Fulfillment orders: which of your locations Shopify assigned each order to. We keep only the location.

Connecting ShipBob is coming soon. Today your warehouse numbers come from a stock file (CSV or Excel) you upload, or that is emailed to your store's own address from senders you approve. We keep the file and the sender's address (encrypted), never the email's text. When the connection opens: in ShipBob you approve read access to stock, products, orders, fulfillments, locations and channels, plus permission to stay connected without signing in again. You connect on ShipBob's own sign-in screen. We never ask for a ShipBob personal access key.

The exact names, for your IT person: Shopify read_products, read_inventory, read_locations, read_orders, read_merchant_managed_fulfillment_orders, read_third_party_fulfillment_orders. ShipBob inventory_read, products_read, orders_read, fulfillments_read, locations_read, channels_read and offline_access (stay connected only).

Nothing else. ShelfTrue has no permission to change anything at your warehouse, your orders or your products, and the free stock check uses exactly the same access.

Our Privacy Policy also describes "Updating Shopify", a feature that changes Shopify stock only for lines a store confirms. It is switched off for every store in this version, and ShelfTrue does not ask Shopify for permission to change stock.

What does it keep, and for how long?

• Stock differences: while open, then 90 days after they are closed.
• Orders (order number, times, products and quantities): 90 days.
• Daily stock record: 120 days on paid plans, 90 days on Free.
• Evidence records: up to 15 months while ShelfTrue is installed, on every plan.
• Access keys for Shopify, and for ShipBob once connected (encrypted): until you uninstall or disconnect.

Older records are deleted automatically every night. Every kind of record and how long we keep it is in the Privacy Policy.

How do I delete it, or leave?

• Any time: in the app, Data and privacy → Delete all my data. It happens right away, and removes our ShipBob access key too, if you connected ShipBob.
• When you uninstall: we delete our Shopify access key right away. About 48 hours later Shopify asks us to erase your store's data, and we delete it when that request arrives.
• Two small records stay, scrambled so they can't be read back to your store: proof that your store agreed to our Terms (4 years), and whether your store already used a free period or an offer place.
• Backups of our database are deleted within 30 days.

Does it see my customers?

No. We never store your customers' names, emails, phones or addresses.

An AI helper writes plain-language explanations, drafts of emails to your warehouse and drafts of our support replies. It gets only what our Privacy Policy lists: the numbers about one stock difference, or the orders in one email (product name and code, quantities, times, order numbers), and the text of support messages with email addresses, phone numbers, your store's myshopify.com address and anything that looks like an access key removed. Please don't put customer names, addresses or passwords in a support message, because the AI may see them. Only your own store's facts. It never decides whether something is wrong.

Who else handles the data?

• Railway: hosting and database, in the United States.
• Postmark: sends our emails.
• Anthropic (Claude): the AI helper above.
• Cloudflare: this website and its spam check.
• Google Analytics: visit counts on this website, only if you allow it.

What each one receives is in the Privacy Policy. We never sell your data and never use it for advertising.

How is it protected?

Everything is sent over encrypted connections. Access keys and alert email addresses are stored encrypted, and are kept out of our system logs. Only ShelfTrue's owner can get into our systems.

If we learn that someone got into your data without permission, we email you without undue delay: what happened, what we are doing about it, and what you need to meet your own duties to notify.

How can I check it before I pay?

• Start with the free stock check. Nothing is charged unless you approve a plan on Shopify's screen.
• Pick 10 to 20 products you know well and compare them with your warehouse's report. Products shows both numbers for each product and how fresh they are, and Download list gives you all of them in one file.
• Questions go to [email protected].