Privacy policy

Rack Scanner ("we", "us") provides inventory counting for Shopify merchants through a Shopify app and Android and iOS mobile apps. This policy explains what we collect, why, and your choices.

Information from merchants

When a merchant installs Rack Scanner we access, through Shopify's APIs, the store's products, variants, barcodes, SKUs, inventory levels and locations, plus the shop's name, email, currency and timezone. We use this only to match scanned codes and update inventory. We do not access or store customer or order data.

Information from app users

• Account: name, email address and a hashed password.
• Devices: platform, model, operating system and app version of phones connected to a store.
• Activity: barcodes scanned, counts submitted and timestamps, so merchants can audit inventory changes.

Camera

The mobile app uses the camera only to read barcodes and QR codes. Images are processed on the device and are never uploaded or stored.

How we use information

• To provide scanning, counting, inventory updates, reports and device management.
• To bill merchants through the Shopify Billing API and enforce plan limits.
• To secure the service (for example, expiring device connections after 24 hours) and to provide support.

We do not sell personal information or use it for advertising.

Sharing

We share data only with Shopify (to read and update the merchant's store) and with infrastructure providers that host and email on our behalf under confidentiality obligations.

Retention and deletion

When a merchant uninstalls Rack Scanner, device connections are revoked immediately and store data is deleted when Shopify sends its redaction request (48 hours after uninstall). App users can request deletion of their account at any time by contacting us.

Security

Data is encrypted in transit. Shopify access tokens are encrypted at rest, passwords are hashed, and admin access requires two-factor authentication.

Contact

Questions or requests: [email protected].