Privacy Policy

Last updated: July 2026

SupplierHQ ("the app") is a vendor and supplier management tool for Shopify merchants. This policy explains what data the app accesses and stores, and how it is handled.

What we do not collect

SupplierHQ does not access, store, or process your shop's customer data (customer names, emails, addresses, or order history). The app's data model is limited to supplier/vendor management — it has no relationship to your storefront customers.

What we do collect and store

• Vendor/supplier records you create: company name, contact details, notes, and documents you upload
• Purchase orders you create and their line items (linked to your Shopify products/variants)
• Reorder rules, email templates, and communication logs you create within the app
• Your shop's domain and basic Shopify session/access-token data required for the app to function
• Billing and subscription plan state

This data is stored in the app's own database and is never sold or shared with third parties. It is used exclusively to provide the app's vendor-management features to your store.

Vendor portal & invite links

If you invite a vendor to your invite form or self-service portal, that vendor submits their own company and contact details directly to you (the merchant) through the app. SupplierHQ processes this data on your behalf as a data processor; you remain the data controller for your vendor relationships.

Data retention & deletion

When you uninstall SupplierHQ, your shop's access tokens are deleted immediately. In compliance with Shopify's mandatory privacy webhooks, all remaining shop data (vendors, purchase orders, documents, communications, settings, and related records) is permanently deleted within 48 hours of uninstall.

You may also request a copy of, or deletion of, your shop's data at any time by contacting us using the details below.

Contact

Questions about this policy or your data can be sent to info@mycodemagic.com.