Privacy Policy

1. Scope

This Privacy Policy applies to information we collect or process in connection with our Services, including when a merchant installs, accesses, or uses a Shopify app or related merchant tool provided by Good Story.

2. Information We Collect

We may collect and process the following categories of information:

a. Information from Shopify

Where a merchant installs or uses one of our Shopify-integrated Services, we may access information made available by Shopify, including as needed to provide the relevant Service:

• store and account information, such as store identifiers, store name, store URL, and contact information;
• product and catalog information;
• inventory information;
• location information;
• order information, including historical order information where access has been approved by Shopify; and
• other Shopify data reasonably required to provide, maintain, support, secure, and improve the Services.

b. Information Provided Directly to Us

We may collect information that merchants or users provide directly to us, such as:

• contact details;
• account information;
• support requests and correspondence; and
• any other information submitted through the Services.

c. Usage and Technical Information

We may automatically collect certain technical and usage information, including:

• log data;
• IP address;
• browser type;
• device information;
• identifiers associated with sessions or requests;
• pages, screens, and features accessed; and
• diagnostic, performance, and error data.

3. How We Use Information

We may use information we collect or process to:

• provide, operate, and maintain the Services;
• authenticate users and manage access;
• analyze inventory, catalog, and sales activity;
• determine product sales recency, inventory age, sell-through patterns, and similar inventory insights;
• generate reports, analytics, recommendations, and workflow functionality;
• communicate with merchants or users about the Services;
• provide customer support;
• monitor, troubleshoot, and improve performance and reliability;
• detect, prevent, and address fraud, misuse, security issues, or technical issues;
• comply with legal obligations, platform requirements, and lawful requests; and
• enforce our agreements and protect our rights.

4. Why We Access Order Information

Some of our Services may use order-related information, including older or historical order information where permitted by Shopify, to provide merchant-facing functionality such as inventory analytics, product recency analysis, and stale or slow-moving stock insights.

We do not access or use Shopify data for unrelated purposes.

5. Protected Customer Data

Certain Shopify APIs and resources may include or expose information that Shopify classifies as protected customer data. Where access to protected customer data is required as part of Shopify’s review or platform requirements, we will request only the level of access reasonably necessary for the relevant Service and will handle that data in accordance with this Privacy Policy, our contractual obligations, and applicable law.

We do not use protected customer data except as needed to provide, secure, support, improve, or comply in relation to the Services.

6. Compliance with Shopify Privacy Requirements

If we distribute a Service through the Shopify App Store, we may receive and respond to Shopify privacy or compliance webhooks and requests, including requests relating to customer data access, customer data deletion or redaction, and shop data deletion or redaction, as required by Shopify.

7. How We Share Information

We do not sell personal information or personal data.

We may disclose information:

• to service providers, contractors, and subprocessors that help us host, operate, support, secure, analyze, or improve the Services;
• to Shopify where relevant to the operation, review, security, or compliance of a Shopify-integrated Service;
• in connection with a merger, acquisition, financing, sale of assets, or other corporate transaction; or
• where required by law, regulation, legal process, or lawful governmental request, or where reasonably necessary to protect rights, safety, security, or property.

8. Data Retention

We retain information for as long as reasonably necessary to:

• provide the Services;
• maintain business and operational records;
• comply with legal, tax, accounting, or regulatory obligations;
• resolve disputes; and
• enforce our agreements.

When information is no longer required for these purposes, we will delete it, de-identify it, or anonymize it where reasonably practicable.

9. Data Security

We use reasonable technical, administrative, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Processing

We and our service providers may process and store information in countries other than the country in which the merchant, user, or customer is located. By using the Services, you acknowledge that information may be transferred to and processed in other jurisdictions, which may have different data protection laws.

11. Rights and Choices

Depending on applicable law, individuals may have rights regarding personal information, such as the right to request access, correction, deletion, or other rights.

Where Shopify is the primary source of the relevant data, requests may also need to be made through Shopify or the relevant merchant. We will respond to requests as required by applicable law and platform obligations.

To make a privacy-related request, contact us using the details below.

12. Third-Party Services

The Services may interact with third-party platforms and services, including Shopify. We are not responsible for the privacy practices of third parties except to the extent we act as their service provider or processor under applicable law.

13. Children

The Services are intended for businesses and are not directed to children.

14. Australian Privacy Law

Good Story is based in Australia. Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we do, we will post the updated version here and update the “Last updated” date above. Your continued use of the Services after an updated Privacy Policy becomes effective constitutes acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Good Story
Email: privacy@goodstory.dev
Website: goodstory.dev