Privacy Policy

1. Who we are

Stock Flash is a Shopify app that displays low-stock urgency badges on your storefront. The App is operated by Mountain Stack Labs. Our website and application are available at https://stockflash.mountainstacklabs.com.

2. Information we collect

When a merchant installs Stock Flash, we may collect and process:

• Shop information — your Shopify store domain and store identifier provided during installation and authentication.
• Session and access data — OAuth tokens and session records required to operate the App inside the Shopify admin.
• App settings — badge configuration you save in the App, such as stock threshold, badge text, colors, layout, animation, and whether badges are enabled.
• Technical logs — basic server logs (for example, request timestamps and error messages) used to maintain reliability and security.

3. Information we do not collect

Stock Flash is designed for storefront badge display and merchant configuration. We do not intentionally collect, store, or sell:

• End-customer names, email addresses, or phone numbers
• Customer order history or payment information
• Shipping or billing addresses of store customers

Product variant inventory quantities may be read from your theme on the storefront to decide whether a badge should appear. That inventory data is used in real time for display and is not stored by us as customer personal data.

4. How we use information

We use the information described above to:

• Authenticate your store and provide the App inside Shopify
• Save and apply your badge settings on your storefront
• Respond to app proxy requests that load public badge settings
• Maintain, secure, and improve the App
• Comply with legal obligations and Shopify platform requirements

5. How information is shared

We do not sell merchant or customer personal information. We may share limited data only in these cases:

• Shopify — as required for app installation, authentication, webhooks, theme extensions, and app proxy functionality on the Shopify platform.
• Service providers — trusted hosting or infrastructure providers that help us operate the App, under confidentiality obligations.
• Legal requirements — when required by law, regulation, or valid legal process.

A subset of your badge settings (for example, enabled status, threshold, colors, and text) may be exposed to storefront visitors through the App's public app proxy endpoint so badges can render on product pages. This data is styling and messaging configuration, not private customer information.

6. Data retention and deletion

We retain shop session data and settings while the App remains installed and as needed to provide the service.

When you uninstall Stock Flash:

• We delete shop session data and saved settings in response to Shopify's app/uninstalled webhook.
• Shopify may also send a shop/redact compliance webhook approximately 48 hours after uninstall; we delete any remaining shop data associated with your store when we receive that request.

Because we do not store end-customer personal data, customer data request and redaction webhooks (customers/data_request and customers/redact) are acknowledged but typically require no additional action from us.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of personal information. Shopify merchants can:

• Uninstall the App at any time from the Shopify admin
• Contact us to request information about data we hold for your shop
• Request deletion of shop-related data by uninstalling the App

If you are a customer of a Shopify store using Stock Flash, please contact the store owner directly for privacy requests related to your purchase or account with that store.

8. Security

We use reasonable technical and organizational measures to protect information, including secure HTTPS transport, authenticated Shopify sessions, and webhook HMAC verification. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Information may be processed in countries where we or our service providers operate. Where required, we take steps designed to protect your information in line with applicable law.

10. Children's privacy

Stock Flash is a business application for Shopify merchants and is not directed at children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be communicated through the App or our website.