Privacy Policy
Last updated October 23, 2026
SteadyShelf ("SteadyShelf", "we", "us") is operated by Ian Cushing, a sole proprietor in Tennessee, USA. This policy explains what information we collect through the SteadyShelf Shopify app and steadyshelf.app, and how we use it.
Information we collect
From your Shopify store, when you install the app: store name, domain and contact email; product and variant details (titles, SKUs, costs, prices); inventory levels and locations; and order line items (which products sold, in what quantity, and when). We use order data only to calculate sales velocity. We do not use customer names, addresses or payment details for any purpose, and we do not store them.
Information you give us: supplier names, lead times and purchase orders you enter or import, plus anything you send through our forms (email, store URL, message).
Website: basic technical data (such as IP address and browser type) processed by our hosting provider for security and performance.
How we use it
- To calculate forecasts, order-by dates and purchase order suggestions.
- To provide support and send service emails about your account.
- To send launch and product updates if you joined early access. You can opt out at any time.
We do not sell or rent your information, and we do not use your store data to train third-party models.
Sharing
We share information only with service providers that help us run SteadyShelf, under obligations to protect it, or when required by law. Current subprocessors: Render (application hosting and database, USA) and Cloudflare (website hosting and security, global).
Retention and deletion
We keep store data while the app is installed, and never keep sales history older than 400 days (the amount needed for year-over-year seasonality). When you uninstall, we delete your store data within 48 hours of Shopify's shop redaction request, and we respond to customer data and redaction requests as Shopify requires. You can ask us to delete your data at any time through our contact page.
Security
Data is encrypted in transit, and access is limited to what's needed to run the service.
Your rights
Depending on where you live (for example under GDPR or CCPA), you may have rights to access, correct, export or delete your information. Contact us and we'll respond within 30 days.
Changes
We'll post updates here and change the date above. Material changes will be emailed to installed stores.
Contact
Use our contact page.