Legal
Privacy Policy
How Replenra, the inventory replenishment app for Shopify, handles personal data belonging to merchants.
Last updated 26 September 2026
Adease LTD ("we", "our", "us"), a company registered in England and Wales (company number 14743980), registered office 124 City Road, London, EC1V 2NX, United Kingdom, publishes Replenra and is the data controller for the limited personal data described below. Where Replenra processes data on a merchant's behalf, the merchant is the controller and we act as their processor.
Contact for privacy matters: support@adease.io
1. Summary
Replenra is built to hold as little personal data as possible. The important points, in plain terms:
- We store identifiers, not people. For a reorder, we keep Shopify's product, variant, inventory and purchase order ID numbers. Replenra does not process shopper or customer personal data of any kind — it operates entirely on product, inventory and supplier records.
- Nothing is sent to third parties. Replenra makes no calls to any service outside Shopify. There is no analytics, advertising, or profiling of any kind.
- Automated decisions are off by default and only ever run when a merchant deliberately switches them on. You can always ask for a person to review one — see section 4.
- Uninstalling erases everything. When a merchant removes Replenra, the shop record and everything attached to it is deleted.
2. What Replenra processes, and why
| What | Why we process it |
|---|---|
| Shopify product ID, variant ID, SKU and inventory item ID | To track stock levels and match reorder recommendations to the right product |
| Inventory levels, sales velocity and historical order quantities | To forecast demand and calculate when, and how much, to reorder |
| Purchase order ID, supplier or vendor ID, purchase order status, quantities and costs | To create and track purchase orders raised through the app |
| A timeline of events on each purchase order, including which rule decided a reorder and the facts it used | So a merchant can audit why any decision was reached. Event records do not contain customer personal data |
| Merchant staff details from Shopify: name, email address, locale, and the Shopify access token for the store | To sign merchant staff into the app and make Shopify API calls on the store's behalf. This is standard Shopify session storage |
One exception worth stating plainly. If a merchant adds a supplier's contact name or email address so purchase orders can be routed to them, that contact detail is held as part of the supplier record until the merchant removes it, or until the shop is deleted.
3. What Replenra never stores
Replenra does not touch shopper or customer data at all. In particular, the following are never written to our database:
- Customer names
- Customer email addresses and phone numbers
- Customer billing and shipping addresses
- Payment card or bank details — Replenra never sees these at all
Replenra does not build customer profiles, does not track behaviour across shops, and does not use any data for advertising or for training machine-learning models.
4. Automated decisions, and how to ask for a person
Replenra includes a rule engine that a merchant can configure to raise purchase orders without someone reviewing each one. It is switched off when the app is installed and stays off until the merchant deliberately turns it on:
- A shop starts at Manual, where every reorder suggestion waits for a person.
- Each rule a merchant creates starts at Assisted, where the rule suggests a reorder quantity and supplier but a person still decides.
- A rule acts on its own only when the merchant sets both the shop and that individual rule to Automatic. A rule can never give itself more authority than the shop-level setting.
Where a merchant has switched both on, a rule may raise and send a purchase order to a supplier without a person looking at it first. Merchants may also set an order value ceiling, above which any purchase order goes to a person regardless of what the rules say. Every automated decision is recorded together with the facts it was based on, so the merchant can see exactly why an outcome was reached.
Asking for a human review. If you are a supplier and believe an automated purchase order was raised in error, contact the merchant who sent it — they can amend or cancel it directly. You may also write to us at support@adease.io and we will pass your request to the merchant. Merchants who would rather not use automation at all can leave Replenra on Manual, which is how it arrives.
5. How long data is kept
Replenra holds identifiers, inventory records and purchase order records for as long as the merchant has the app installed, because a purchase order can be reopened, disputed or received long after it was raised. Because Replenra does not process customer personal data, there is no store of customer data ageing in the background.
We implement all three of Shopify's mandatory privacy webhooks:
- Customer data request. Replenra holds no personal data about Shopify customers, so there is nothing to report in response to this request.
- Customer erasure. As above, Replenra holds no customer personal data to erase.
- Shop erasure. We delete the shop record and every session, inventory snapshot, purchase order, rule and event attached to it. Nothing belonging to that shop is retained.
6. Who else sees the data
Replenra sends no personal data to any third party. There are no analytics services, no advertising networks, no customer-support tools and no AI or machine-learning services in the path of your data. The only external service Replenra communicates with is Shopify itself.
Where a merchant sends a purchase order to a supplier by email, that email address is used solely to deliver the order and is not shared onward beyond that.
The infrastructure providers that host the application and its database process data on our instructions in order to run the service, and do not use it for their own purposes.
7. Your rights
Under the UK GDPR and equivalent laws you may ask for access to your personal data, correction of it, erasure of it, restriction of processing, portability, and you may object to processing including automated decision-making.
If you are a supplier acting as a contact on a purchase order, the merchant is the controller of that contact information and is the fastest route to have it corrected or removed. Requests made to us are passed to the relevant merchant and actioned on our side. If you are a merchant, write to us directly.
If you are in the UK and believe your data has been mishandled, you may complain to the Information Commissioner's Office at ico.org.uk.
8. Security
Shopify access tokens are held in the app's session store and are used only to make API calls for the store they belong to. Access to production data is limited to those who need it to operate the service.
9. Changes to this policy
If we change how Replenra handles personal data we will update this page and change the date at the top. Material changes affecting merchants will also be communicated through the app listing.
10. Contact
Adease LTD
124 City Road, London, EC1V 2NX, United Kingdom
Company number 14743980