Privacy Policy
Paienta — a Shopify app operated by Nurdan Ozturk trading as Paienta (ABN 86 372 519 314), 8 Braemar Avenue, Auburn NSW 2144, Australia.
Effective 10 August 2026. In this policy, "we" and "us" mean Nurdan Ozturk trading as Paienta; "you" means the merchant who installs the app; "your customers" means the people who buy from your store.
The short version
Paienta works out how fast each of your products sells, and tells you what to reorder and when.
To do that it needs to know how many units of a product sold on a day. It does not need to know who bought them, and it does not ask. Your customers' names, email addresses, phone numbers and delivery addresses are never requested from Shopify, never read, and never stored.
What we do store is a per-product sales count per day, your current stock levels, the settings you type in, and any purchase orders you create. If you uninstall the app, all of it is deleted.
The rest of this document is the same statement with the detail behind it.
1. Who we are
Nurdan Ozturk trading as Paienta is an Australian sole trader. For the data described in section 4 as your business data, we are the data controller. For your customers' data, you are the controller and we would be your processor — but as section 3 explains, we do not process any.
Privacy questions and requests: support@paienta.com.
2. What the app is for
One purpose, and everything below follows from it: forecasting how much stock you need. We do not use your data to build products for anyone else, we do not sell it, we do not share it with advertisers, and we do not use it to train machine learning models. There is no analytics tracking and no advertising in the app.
3. Your customers' data — what actually happens
This is the section worth reading carefully, because the arrangement is unusual and the app is designed around it.
We ask Shopify for the minimum
When the app reads your order history it requests, for each order, only:
- the date the order was processed,
- whether it was cancelled or was a test order,
- and for each line: the product variant and the quantity.
It requests no customer fields at all — no name, no email address, no phone
number, no shipping or billing address. This is not a promise about our
intentions; it is the literal content of the queries, which are kept together in
a single file (app/data/queries.ts) precisely so the claim can be checked
rather than trusted.
It is also a claim we have made to Shopify on the record. Our access to order data is declared with Shopify as Level 1 protected customer data, with no protected customer fields selected, and Shopify may audit that at any time.
Two places data does reach our server, and what happens to it
We would rather be precise than flattering, so:
Order identifiers. Shopify's response includes an identifier for each order and each line item. These reach our server. They are used only to group lines while the file is being read, and are discarded during that read — they are never written to our database. What is written is a running total per product per day.
Webhook notifications. When an order is placed or updated, Shopify sends our server a notification whose body does contain your customer's details. Our code never reads that body. It treats the notification purely as a signal that something changed, and then goes back to Shopify's API for the aggregate counts it actually wants. The body is discarded unread.
The result is that our database contains no record of any order, and nothing that identifies or could be linked to any of your customers. We could not identify one of your customers from our data if we were asked to.
What this means for data subject requests
We answer Shopify's three mandatory compliance webhooks
(app/routes/webhooks.compliance.tsx):
- A customer asks to see their data. We hold none, so there is nothing to provide to you.
- A customer asks to be erased. We hold nothing to erase. To be exact about a fair question: the daily totals do include units that customer bought, but they are sums across every order in your shop with no link back to any of them. There is no way to find "their" rows, and no sense in which those rows are about them — they are a count of products, not a record of people.
- Your shop data is to be erased, 48 hours after you uninstall. We delete it. See section 7.
4. What we do store
| What | Why | Personal data? |
|---|---|---|
| Your shop's domain, time zone and currency | Everything is dated in your local days; getting the zone wrong shifts every number | Only in the sense that a sole trader's shop may be named after them |
| Units sold per product per day | The demand rate the whole forecast is built on | No |
| Which products were out of stock on which day | So a day with no stock isn't read as a day with no demand | No |
| Current stock on hand per product | To know how long it lasts | No |
| Your product names, SKUs, images and status | So you recognise a row | No |
| Your settings — lead time, review period, service level, per-product overrides | Your forecast inputs | No |
| Purchase orders you create: supplier name, note, products, quantities | The reorder loop | A supplier name is a business, typed by you |
| A record of which product we last emailed you about, and when | So we email at most once per product per week | No |
| A Shopify API access token for your shop | Without it we cannot read anything | It is a credential — see section 8 |
| Your alert email address, only if you type one | Where to send low-stock alerts | Yes — yours, not a buyer's |
Your store's contact email is used as the default alert recipient. It is fetched from Shopify when an email is being sent and is not stored by us — we can always ask Shopify for it, so keeping a copy would put a personal record in a database that otherwise holds none.
Our server logs record which shop an operation ran for and whether it succeeded. They contain no customer data.
On the access token record: it stores your shop domain, the token itself, and the permissions granted. The underlying table, which comes from Shopify's own app template, also has columns for a staff user's name and email address. These are used by apps that authenticate individual staff members; Paienta does not, so for us those columns are always empty.
5. Our legal basis (GDPR / UK GDPR)
Where the UK or EU GDPR applies to your own business data:
- Performance of a contract — we cannot provide a forecasting service without reading your sales and holding your settings.
- Legitimate interests — keeping the service secure, diagnosing failures, and emailing you when a product is about to run out. You can switch the emails off at any time on the Settings screen.
For your customers' data, no basis is required from us, because we process none.
6. Who else sees it
We use two service providers, and no others:
| Provider | What they get | Where |
|---|---|---|
| Fly.io — runs the app and stores the database | Everything in section 4 | Ashburn, Virginia, United States (Fly.io region iad) |
| Resend — sends low-stock emails | The recipient address, and the product names, SKUs, counts and dates in that email | Ireland (Resend region eu-west-1). Resend is a US company, so US access is possible under its own terms |
Both are bound by contract to process data only on our instructions.
We do not sell your data, and we do not share it for advertising. We will disclose data if we are legally required to, and we will tell you unless we are prohibited from doing so.
We may transfer the business as a going concern, in which case these commitments transfer with it and you will be told before anything moves.
7. How long we keep it
- Sales history is trimmed to the forecasting window automatically; older daily totals are deleted as they age out.
- When you uninstall, we delete everything for your shop outright — your settings, your history, your purchase orders and your access token. There is no grace period and no archive. We can afford to do this because nothing we hold is irreplaceable: every figure was derived from your Shopify data and would be rebuilt if you reinstalled.
- Shopify sends a shop erasure request 48 hours after uninstall as a backstop; we act on it, which covers the case where the first deletion failed.
- Server logs are kept for 7 days.
8. Security
- In transit: everything is over HTTPS.
- At rest: your Shopify access token is encrypted with AES-256-GCM using a key held outside the database, so a copy of the database alone does not yield a working credential. The remaining data is stored on encrypted storage provided by Fly.io.
- Least privilege: the app holds read-only permissions on your store (orders, products, inventory, locations). It cannot change your products, your stock or your orders — including when it tells you to reorder something. It requests no permission to read customers.
No system is perfectly secure. If a breach affects your data we will notify you without undue delay and, where required, within 72 hours of becoming aware.
9. Your rights
Depending on where you are, you may have the right to access, correct, delete, port, or object to our use of your business data, and to withdraw consent where we rely on it. Australian users have rights under the Privacy Act 1988; users in the EU/UK under the GDPR; users in California under the CCPA/CPRA.
We do not sell or share personal information as those terms are defined under the CCPA, and we have no automated decision-making that produces legal or similarly significant effects on any person — the app decides how many units of a product to order, which affects stock, not people.
Email support@paienta.com. We respond within 30 days. Most of it you can also do yourself: uninstalling the app deletes everything.
If you are unhappy with our response you may complain to your supervisory authority — in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).
10. International transfers
We are in Australia and our providers are listed in section 6. Where data originating in the EU or UK is transferred, we rely on Standard Contractual Clauses with the provider concerned.
11. Children
The app is a business tool sold to businesses and is not directed at anyone under 18. We knowingly collect nothing from children.
12. Changes
We will post any change here and update the date at the top. If a change is significant — a new sub-processor, a new category of data, a new purpose — we will email you at your store contact address before it takes effect.
13. Contact
Nurdan Ozturk trading as Paienta 8 Braemar Avenue, Auburn NSW 2144, Australia support@paienta.com