Privacy Policy

Nevershort Inventory Forecast, a Shopify app.

Last updated 17 October 2026

This page explains exactly what the app reads from your Shopify store, what it keeps, who else sees it, and how it is deleted. It is written to be checked rather than taken on trust: every statement here matches what the code does.

The app is operated by Pedro Macedo, of Rua Mato Grosso 1149, Centro, Cascavel, Paraná 85812-020, Brazil. Questions about anything on this page go to contato@msvdata.com.

The short version

The app only ever reads from your store. It holds no write permission of any kind and cannot change your products, your stock or your orders.
We hold nothing about your customers. No names, no email addresses, no phone numbers, no addresses. The order query the app sends to Shopify does not even ask for those fields, and the database has no column to put them in.
The one personal detail we store is your shop owner email address, because that is where the weekly reorder email is sent.
Uninstall the app and your data is deleted. Not archived, not anonymised. Deleted.

1. What the app reads from Shopify

At install, Shopify asks you to approve a list of permissions. Ours are these, and all six are read-only:

read_products — your products and their variants
read_inventory — stock levels
read_locations — your locations
read_orders and read_all_orders — order line items, including those older than Shopify's default 60-day window
read_reports — Shopify's inventory report, for the daily stock levels of the 90 days before you installed

There is no write_ permission on that list and there never will be. Forecasting does not require writing to your store, and an app that cannot write cannot corrupt your inventory.

Field by field, this is everything the app asks Shopify for:

Products and variants

Product title, status, product type, vendor, whether it is a gift card, and when it was last changed. For each variant: title, SKU, price, unit cost (if you maintain one), whether Shopify tracks its stock, whether it is a bundle, and — for a bundle — which variants it is made of and how many of each.

Locations

Location name, and whether the location is active.

Stock levels

The quantity available for each variant at each location. At install, the app reads the daily stock levels of the previous 90 days from Shopify's inventory report, and from then on records its own daily snapshot of those quantities. That history is what lets the forecast tell "sold nothing" apart from "had nothing to sell".

Orders

Per order: Shopify's order ID, the date it was processed, the date it was created, the date it was cancelled if it was, whether it is a test order, and the currency.

Per line item: Shopify's line ID, the SKU, the variant, the quantity ordered, the quantity remaining after refunds and cancellations, the unit price, and — if the line came from a bundle — which bundle.

That is the whole list. Quantity, variant and date. Nothing that identifies who placed the order.

Shop settings

Your shop's time zone, its currency, and the shop owner's email address. The time zone decides when "Monday morning" is for your weekly email; the owner address is where that email goes.

The app also subscribes to Shopify webhooks so the data stays current without re-reading your whole store: order created, order updated, inventory level updated, shop settings updated, app uninstalled, app permissions changed, and Shopify's three mandatory compliance topics.

2. What the app does not read

Nothing about your shoppers. To be specific, the app does not request, receive on request, or store any of the following: customer name, email address, phone number, shipping address, billing address, IP address, order name or number, order notes, order tags, discount codes, or any payment or card detail.

Shopify grades apps by how much customer data they are approved to handle. This app holds Level 2 access. We need it for one reason: Shopify only lets apps read store reports, which is where your past stock levels live, at that level. Being approved for it is not the same as using it. The app never requests customer names, addresses, phone numbers or email addresses, and the reports it reads contain none.

One honest detail. When an order is placed or edited, Shopify sends our server a webhook, and Shopify's webhook payload is a full order record that does include shopper details. The app reads only the fields listed under "Orders" above out of that payload and writes nothing else to disk; the rest is discarded with the request. So those details pass through the server's memory for the moment it takes to handle the webhook, and are never stored, logged or forwarded.

3. What the app stores

Everything the app keeps lives in one PostgreSQL database. This is the complete list of what is in it:

Your shop. Your .myshopify.com domain, currency, time zone, the shop owner's email address, when you installed, when you uninstalled if you have, and the default supplier lead time you set in the app.
Products, variants, locations and bundle composition — the fields listed in section 1.
Stock. The current quantity per variant per location, plus one snapshot per day of those quantities.
Orders and order lines. Date, quantity, SKU, variant, unit price, currency, and whether the order was a test or was cancelled. No customer identifiers of any kind.
Calculated sales velocity — units per variant per day, derived from the orders above.
Suppliers you enter yourself. Supplier name, lead time in days, typical lateness, and a free-text notes field. Shopify has no concept of a supplier, so none of this comes from your store — you type it, and it is only ever read back to you. The notes field is yours to use as you like, which also means: please do not type your customers' personal details into it.
Sync history. One row per sync attempt: which resource, when it started and finished, how many rows it read and wrote, and the error message if it failed. This is what powers the "data health" screen, so that a sync which stops working is visible to you instead of silent.
Email log. One row per weekly email: the recipient address, the subject line, which week it was for, which service sent it, that service's message ID, how many attempts it took, and any error. The body of the email is not kept.
Your Shopify session. The access token Shopify issues so the app can read your store in the background, along with your shop domain, the permissions you granted, and when the token expires. The app requests offline access only, so the fields that Shopify's app library reserves for an individual staff member's name and email address are never filled in.

The app sets no advertising or analytics cookies. The only cookies involved are the ones Shopify's own app library uses to sign you in and keep you signed in while you use the app inside Shopify admin.

4. Where it is stored

On Amazon Web Services, in the us-east-1 region (Northern Virginia, United States). One server runs the app; a managed PostgreSQL database holds the data described above.

If your store is outside the United States, this means your store data is transferred to and processed in the United States.

5. Who else sees your data

Four companies, and nothing is sold or shared with anyone for advertising, ever.

Shopify

The source of all the store data described above, and the platform the app runs inside. The app also asks Shopify's Partner API which plan your shop is subscribed to; that request identifies your shop and nothing more. Your subscription is billed by Shopify on your Shopify invoice — no payment or card details reach this app.

Amazon Web Services, Inc. (United States)

Hosts the server and the database, and therefore holds all of the data in section 3. AWS also holds the application's configuration and secrets, and the database backups.

Resend (United States)

Delivers the weekly reorder email. Resend receives the shop owner's email address, the subject line, and the full body of that email — so it sees the products the app is recommending you reorder, their SKUs, the suggested quantities and the estimated values. It receives nothing else: no order records, no customer data, no access to your store.

If no email service is configured on the server, the app writes the email into its own server log instead of sending it, and records in the email log that nothing was delivered.

Cloudflare, Inc. (United States)

Counts visits to the public website at nevershort.app, including this page, through Cloudflare Web Analytics. It is not loaded inside the app in Shopify admin. It sets no cookies, uses no local storage and does no fingerprinting. Once you click, tap, scroll or type on a page, it records that page's address, the referring page, your browser, operating system and device type, your country, and how long the page took to load. Cloudflare processes this on our behalf.

The app's screens inside Shopify admin load fonts and Shopify's own user interface assets from cdn.shopify.com. There are no third-party analytics, tracking pixels, session recorders, advertising tags or chat widgets anywhere in the app.

6. How long it is kept, and how to delete it

While the app is installed, the data is kept. The history is the product: a forecast built on two weeks of sales is a guess, and the daily stock snapshots cannot be rebuilt after the fact because Shopify does not store them.

When you uninstall

Shopify notifies the app, and the app deletes your shop record. That deletion cascades: products, variants, locations, bundle composition, stock levels, daily snapshots, orders, order lines, calculated velocity, your suppliers, the sync history and the email log all go with it. The access token is deleted last, so the app no longer holds any credential for your store.

Shopify's shop redaction request

Roughly 48 hours after an uninstall, Shopify sends a shop/redact request. The app runs exactly the same deletion again. It is safe to run twice, which means that even if the uninstall notification is lost in transit, the data is still deleted.

Backups

The database keeps 14 days of point-in-time recovery, so that a failure does not cost merchants their only copy of their stock history. A record deleted today can therefore still exist inside those backups for up to 14 days, after which it ages out on its own. Backups are only ever used to restore the whole database after a failure.

Server logs

The server keeps operational logs: shop domains, which syncs ran and what they returned, and error messages. They stay on the server, are not shipped to any third party, and are lost when the server is replaced.

7. Shopify's mandatory data requests

Shopify requires every app to answer three requests. Here is what each one does in this app:

customers/data_request — a shopper has asked what data an app holds about them. The answer is nothing. The app holds no customer records at all, so there is nothing to produce.
customers/redact — a shopper has asked for their data to be erased. There is nothing to erase, for the same reason.
shop/redact — your store's data must be deleted. This one does real work: it deletes everything, as described in section 6.

If one of your customers asks you about data an app might hold, this app is not part of the answer. Handle their request in Shopify, which is where their data actually lives.

8. Security

The app requests read-only access to your store, so the worst case cannot include a change to your inventory.
All traffic to the app is over HTTPS.
The database and the server's disk are both encrypted at rest.
The database is not reachable from the internet. It has no public address.
Credentials are held in AWS Systems Manager Parameter Store as encrypted secrets, and are never committed to the application's source code. Your Shopify access token is stored in the encrypted database.
Every incoming webhook is cryptographically verified against Shopify's signature before it is acted on. A request that does not carry a valid signature is rejected.

9. Your choices and your rights

You can ask us what data we hold about your store, ask us to correct it, or ask us to delete it. Write to contato@msvdata.com. The fastest route to deletion is simply to uninstall the app, which triggers it automatically.

Depending on where you are, local law may give you further rights over your personal data. The only personal data the app collects about you is your shop owner email address; the only other way personal data can reach it is if you type it into a supplier's notes field yourself. Ask at the address above and we will tell you what we have and remove it on request.

10. Changes to this policy

If what the app reads, stores or sends changes, this page changes with it, and the date at the top is updated. The current version is always at https://nevershort.app/privacy.