Privacy Policy

Athory (“the App”) provides inventory optimization — demand forecasting, safety stock calculations, reorder recommendations, supplier analytics, and inventory dashboards (“the Service”) to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

We process your data in compliance with the General Data Protection Regulation (GDPR). Athory is the data controller responsible for your personal information; our full contact details are at the end of this policy.

Personal Information the App Collects

When you install the App, we are automatically able to access the following types of information from your Shopify account, through Shopify's API:

• Orders — including historical, draft, and edited orders: line items, quantities, dates, and discounts, used to model demand and forecast sales.
• Products, variants, and pricing — titles, SKUs, costs, prices, and price rules, used to build your catalog and recommendations.
• Inventory levels and locations — used to calculate safety stock, reorder points, and stockout risk.
• Fulfillments, shipping, refunds, and returns — used to reconcile actual demand and adjust forecasts.
• Store analytics, reports, marketing events, and markets — used to improve forecasting accuracy and surface inventory insights.

Additionally, we collect the following types of personal information directly from you and/or those who access the App on behalf of your store, once you have installed the App:

• Account data — your name, email address, and login activity when you create an account. Your password is securely hashed and is never accessible to us.
• Contact form data — name, email, company, and message when you submit a form on our website. When you submit a form, we also associate the details you provide with the site-usage analytics from that browsing session, so we can see which pages led to your enquiry.
• Billing data — your subscription plan and status. All payment processing is handled by Shopify; we never see or store your payment card information.
• Usage data — page views, performance metrics, and interaction data collected through analytics tools. This data is anonymous unless you submit a contact form (see above), after which that browsing session is linked to the details you provided. See our Cookie Policy for details.

Information we do not collect

We do not collect or store the personal data of your customers— the shoppers who buy from your store. We process order data for demand analysis only and do not retain end-consumer names, emails, or addresses. We have implemented Shopify's mandatory data-protection webhooks (customer data request, customer redaction, and shop redaction); because we hold no customer data, there is nothing for us to return or erase in response. We also do not use web beacons, advertising pixels, or cross-site tracking.

Anti-abuse record

To prevent repeated free-trial abuse after app uninstall or account deletion, we may retain a restricted anti-abuse record containing only a keyed hash of your Shopify shop ID, when the trial was used, and when that record expires. It does not include your shop domain, email, store name, billing details, access tokens, or operational store data.

How we collect this information

We collect personal information directly from the relevant individual, through your Shopify account, and using the following technologies:

• “Cookies” are data files placed on your device. We use them only to keep you signed in to the App; our analytics do not rely on cookies. For more information about cookies, and how to disable them, visit allaboutcookies.org.
• “Log files”track actions occurring on our website and within the App, and collect data such as the IP address and browser type of the person using the App or visiting our website (not your store's shoppers), along with date/time stamps, used for security and reliability.

How We Use Your Personal Information

We use the personal information we collect in order to provide the Service and operate the App. Additionally, we use this information to:

• Communicate with you and respond to your inquiries;
• Optimize and improve the App through analytics and error tracking; and
• Maintain the security and reliability of the Service.

We do not use your information for behavioural or targeted advertising, and we do not sell your information.

Legal Basis

• Contract: account data, Shopify integration, and billing — necessary to provide the service you signed up for.
• Legitimate interests: analytics, error tracking, security, and free-trial abuse prevention — to keep the service reliable, fair, and secure.
• Consent: contact form submissions and marketing communications. You may withdraw consent at any time.

Sharing Your Personal Information

We use third-party service providers to operate the Service. Key processors include our cloud infrastructure provider (EU) for hosting and data storage, Shopify for e-commerce integration and billing, and smaller providers for authentication, analytics, email delivery, error tracking, and CRM. Each provider processes data under a data processing agreement. We do not sell your data or share it with advertisers.

Finally, we may also share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.

Your Rights

If you are a European resident, you have the right to access the personal information we hold about you and to ask that it be corrected, updated, deleted, or ported to another provider. You can also restrict or object to processing and withdraw consent at any time. To exercise these rights, contact us at sales@athory.com — we will respond within 30 days.

We process your information in order to fulfill the contract we have with you and to pursue the legitimate business interests listed above. Your primary service data is stored in the EU. Some processors operate in the United States, United Kingdom, and Canada; for these transfers we rely on the EU–U.S. Data Privacy Framework, Standard Contractual Clauses, and applicable adequacy decisions.

You also have the right to lodge a complaint with your local data protection authority. In Denmark, this is the Danish Data Protection Agency (Datatilsynet), at datatilsynet.dk.

Data Retention

We retain your data while your account is active. When you uninstall the App, we immediately revoke and delete your Shopify access credentials; your associated store data, forecasts, user accounts, uploaded files, and billing records are then deleted through Shopify's mandatory data-redaction process, which completes after Shopify's redaction window. We may retain the restricted anti-abuse trial record described above for up to 7 years, and then delete it. Contact form data is retained until you request its deletion. Analytics and error data follow each provider's standard retention periods.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of material changes by email or by updating the date above.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

Athory
sales@athory.com
Randersgade 44
2100 Copenhagen
Denmark