Privacy Policy
Last updated:
RestockChime is run by Startup Lab. This policy explains how Startup Lab ("we", "us") handles information when you use RestockChime.
What we collect
- Your Square merchant ID, business name and location business email (used as the reply-to address), and the access and refresh tokens Square gives us (encrypted with AES-256-GCM).
- Your Square Online site IDs, titles and domains, and whether our button is installed on each.
- Shopper requests made on your store: the shopper’s email address, the item and variation they asked about, its name and page link, and when they asked. The email address is deleted as soon as the alert is sent, when the shopper unsubscribes, after 12 months without a restock, or when you disconnect.
- A one-way hash of the email address of shoppers who unsubscribe from your shop, so they are not emailed again.
- A short log of the emails we send (recipient, kind, when, and whether it was delivered; not the email bodies). Back-in-stock entries are deleted after 30 days.
- If you subscribe: your Stripe customer and subscription IDs and the subscription status. Card details stay with Stripe.
- Technical data: our hosting provider processes IP addresses and basic request logs to run and protect the service. We use only the cookies listed on our Cookies page.
Shoppers who ask for a back-in-stock alert
When a shopper enters their email on a shop's sold-out item, we collect it on behalf of that shop. The shop is responsible for the data (the controller) and we process it only to send that one alert (the processor). We use the address once, when the item is back, then delete it. We delete it sooner if the shopper unsubscribes, after 12 months without a restock, or when the shop disconnects. We never add it to a mailing list, sell it, or give the shop a copy. Shoppers can read more on our page for shoppers or email support@restockchime.com to have their address removed.
Why we use it
Only to provide the service you signed up for, keep it secure, bill your subscription, and answer your support emails. We do not sell data and do not use it for advertising.
Service providers (sub-processors)
| Provider | What for | Data involved |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, security, privacy-friendly page-view analytics | Everything we store; request logs |
| Resend | Sending account emails and back-in-stock alerts | Recipient email addresses and the email content |
| Square | Sign-in and the source of your item and stock data | Your Square account data, under Square's own privacy policy |
| Stripe, Inc. | Subscription billing and payments | Your billing contact and payment details (entered on Stripe, not stored by us) |
These providers may process data in the United States and other countries where they operate.
How long we keep it
- While you are connected, we keep what the service needs.
- When you disconnect (in Settings, or in Square), we delete your tokens, settings and logs right away.
- Billing records are kept by Stripe and us as long as the law requires.
- Support emails are kept as long as needed to help you.
Your choices and rights
You can disconnect at any time to delete your data, or email support@restockchime.com to ask for a copy, a correction or deletion. Depending on where you live, you may have further rights under laws such as the GDPR or CCPA, including the right to complain to a data protection authority.
Security
Children
RestockChime is not meant for children.
Changes
If we change this policy in a way that matters, we will update the date above and tell connected customers by email before the change takes effect.
Contact
Startup Lab, the company that runs RestockChime: support@restockchime.com.