Privacy Policy — apples by Abilium

Apples by Abilium ("apples", "we", "us", "our") is an inventory-analytics application for Shopify, operated by Abilium the Agency. This policy explains what data the app accesses, how we use it, how we protect it, and your choices.

1. Data we access

When a merchant installs apples on their Shopify store, we access the following through the Shopify Admin API, using only the permissions the merchant grants:

• Product and variant catalog (titles, SKUs, options, cost, price)
• Inventory levels and store locations
• Order and sales data, and Shopify sales reports (ShopifyQL)

Order data may include customer information as returned by Shopify. We do not store individual customer personal data. During processing, order and report data is aggregated into units sold and net sales by product, variant, and time period. Customer fields such as name, email, phone, and address are not retained.

2. How we use data

We use the data solely to provide the app's functionality to the merchant:

• Inventory velocity and days-of-supply analytics
• Demand forecasting
• Purchasing and open-to-buy recommendations

We do not sell data, use it for advertising, or share it except with the service providers listed below.

3. AI assistant (optional)

If a merchant chooses to use the in-app AI assistant, aggregate business data (for example, sales-velocity and buy-plan figures) may be sent to our AI provider, Anthropic, to generate answers. No individual customer personal data is transmitted.

4. Storage and security

Data is stored on Google Cloud Platform (Cloud SQL for PostgreSQL) and encrypted at rest and in transit (TLS). Shopify access tokens are additionally encrypted at the application layer. Access is restricted to authorized personnel on a need-to-know basis.

5. Data retention and deletion

• Aggregated data is retained while the app is installed.
• Daily inventory snapshots are pruned after 120 days.
• On uninstall, we honor Shopify's shop data-erasure request (shop/redact) and delete the store's data.
• We honor Shopify's customer data-request (customers/data_request) and customer-redaction (customers/redact) webhooks. Because we do not store individual customer personal data, there is generally no customer data to return or delete.

6. Service providers (sub-processors)

• Google Cloud Platform — hosting and database.
• Anthropic — the optional AI assistant feature (aggregate business data only).

7. Your rights

Merchants and their customers may request access to, or deletion of, personal data as required by applicable laws, including the GDPR and CCPA. Because we do not retain individual customer personal data, such requests are generally satisfied automatically. To make a request, contact us using the details below.

8. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.

Terms of Service

Your use of the Service is also governed by our Terms of Service.

9. Contact

Abilium the Agency — adrian@abiliumtheagency.com