Privacy policy

1. Who we are

UnitStock is a Shopify inventory application operated by SJL Ventures ApS (CVR 46390733), Allégade 23, 1., 5000 Odense C, Denmark. For privacy questions or requests, email hello@lundgaardlab.com.

2. Information we process

When a merchant installs or uses UnitStock, we process:

• Shop and account information: the Shopify shop domain, app authorization details, granted permissions, and limited account details supplied by Shopify such as user ID, name, email, locale, and account role when available.
• Catalog and inventory information: product, variant, inventory item and location identifiers and titles, available quantities, bundle definitions, component quantities, and the inventory rules a merchant creates.
• Operational information: synchronization status, previous and calculated stock quantities, timestamps, webhook identifiers and topics, and technical error details.
• Support information: messages, screenshots, and other information a merchant chooses to send when requesting help.

UnitStock does not read or retain Shopify customer records, order details, or payment-card information. App subscription payments are handled by Shopify.

3. How we use information

We use the information above to:

• authenticate the shop and provide UnitStock;
• calculate, update, and reconcile inventory for packs, bundles, and physical stock variants;
• save merchant configurations and prevent duplicate processing;
• diagnose failures, secure the service, and provide support; and
• meet legal, accounting, and platform obligations.

Where the GDPR applies, we rely on performance of our contract, legitimate interests in operating and securing UnitStock, and legal obligations. We do not sell personal information or use it for third-party advertising.

4. Service providers and disclosures

We share information only where needed to operate UnitStock, comply with law, or protect the service. Key providers include Shopify for the app platform, authentication, inventory APIs, and billing, and Render for application and database hosting in Frankfurt, Germany.

If error monitoring is enabled, limited technical error information may also be processed by Sentry. UnitStock is configured not to attach request query strings, headers, webhook payloads, or customer data to those reports. Providers may use approved subprocessors. Where data is processed outside the EEA, we use appropriate contractual or legal safeguards where required.

We may disclose information if required by law, to respond to a valid legal request, or in connection with a merger, acquisition, or sale of the service, subject to applicable protections.

5. Retention and deletion

We keep information only while it is needed to provide UnitStock, support the merchant, resolve security or billing issues, and meet legal obligations. Shopify session data is removed when the app is uninstalled. When Shopify sends its shop-redaction request after uninstall, UnitStock deletes the shop's saved inventory rules, bundle setups, synchronization events, webhook receipts, and remaining sessions.

Limited residual copies may remain temporarily in protected backups until those backups rotate. Support correspondence may be retained for as long as reasonably necessary to resolve the request and keep a business record.

6. Security

We use reasonable technical and organizational measures designed to protect information, including encrypted network connections, restricted production access, and separate production and test environments. No service can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive a copy of personal information, or object to certain processing. You may also complain to your local data protection authority. Email hello@lundgaardlab.com with your shop domain so we can identify the correct account. You can also revoke UnitStock's Shopify access by uninstalling the app.

8. Website data

The public Lundgaard LAB and UnitStock pages do not set advertising cookies. Our hosting provider may process standard technical logs, such as IP address, browser type, requested page, and timestamp, to deliver and secure the website.

9. Changes to this policy

We may update this policy as UnitStock or applicable requirements change. The date at the top shows the latest revision. Material changes will be communicated through an appropriate channel.