Northline Privacy Policy

Effective date: September 5, 2026

Northline Reorder is a product of Northline Group. Northline Group respects the privacy of merchants and their customers. This Privacy Policy explains what information Northline processes, why we process it, how we protect it, and how long we keep it when merchants use Northline Reorder.

By installing or using Northline Reorder, you acknowledge the data practices described in this Privacy Policy.

1. Information Northline processes

Northline processes only the information reasonably necessary to provide its inventory, replenishment, supplier, purchase order, shipment, and related store-management features.

This may include:

• Shopify store and app installation information;
• product, variant, SKU, inventory, and location information;
• supplier information entered by the merchant, including supplier contact email addresses;
• merchant-selected report recipients and purchasing reply-to email addresses;
• transactional email content and delivery metadata for requested reports and supplier purchase orders;
• reorder settings and inventory configuration;
• purchase orders, shipments, tracking, and receiving records;
• app session and authentication information required to connect Northline to Shopify.

Recent Shopify order data

Northline also processes limited recent Shopify order data to provide features such as Sales Velocity.

For this purpose, Northline processes only the minimum order information required for the calculation, such as:

• order identifiers;
• product variant identifiers; and
• current line-item quantities.

Northline does not request customer names, email addresses, phone numbers, billing addresses, or shipping addresses for this feature.

Recent order information used for Sales Velocity is processed on demand to calculate metrics such as:

• units sold during the relevant period;
• average units sold per day; and
• estimated inventory days remaining.

Northline does not persist the raw recent Shopify order data used for these calculations in its application database. To improve performance, Northline may temporarily cache derived aggregate sales totals by product variant. This cache does not contain raw Shopify orders or customer identifiers.

2. How we use information

Northline uses information only to provide, maintain, secure, and improve the store-management functionality requested by merchants.

This includes:

• displaying and managing inventory information;
• calculating reorder recommendations;
• managing suppliers and supplier information;
• preparing, sending, and tracking merchant-requested purchase orders;
• sending merchant-requested inventory email reports;
• managing shipment and receiving workflows;
• calculating inventory and sales-velocity metrics;
• authenticating merchants and maintaining app sessions;
• troubleshooting, protecting, and operating the service.

Protected customer data obtained through Shopify is used only for the functionality described above.

3. No sale or advertising use

Northline does not sell protected customer data.

Northline does not use Shopify customer or order data for targeted advertising, cross-context behavioral advertising, customer profiling for marketing, unrelated marketing campaigns, or personalization directed at individual Shopify customers.

We do not rent or sell protected customer data to third parties.

4. Data minimization

Northline is designed to process only the minimum data required for each feature.

For example, Sales Velocity does not require Northline to access a customer's name, email address, phone number, or postal address, so Northline does not request those fields.

If Northline introduces functionality in the future that requires additional protected data, our data practices and Shopify permissions will be updated as required before that information is used.

5. Data retention and deletion

Recent Shopify order information used for Sales Velocity is processed transiently during the calculation and is not retained as raw order or customer data by Northline.

Merchant operational information, such as inventory configuration, suppliers, purchase orders, shipments, receiving records, email delivery metadata, and the saved subject/message snapshot for a supplier purchase order, is retained while reasonably necessary to provide Northline's services. When a transactional email needs a safe retry, Northline may temporarily retain the generated attachment bytes needed to retry the exact message. Those attachment bytes are removed after the email provider accepts the message.

When Northline Reorder is uninstalled, app session information is removed and active supplier-access links are revoked. Remaining shop data is deleted when Northline receives Shopify's required shop-redaction request, except where retention is required by applicable law.

Northline also responds to Shopify's mandatory privacy and data-deletion requests in accordance with Shopify's requirements.

6. Security

Northline uses reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

Data transmitted between Northline, Shopify, its email provider, and its infrastructure providers is protected using HTTPS/TLS.

Stored application data is hosted using infrastructure and database providers that support encryption of data at rest.

Access to application data is limited to what is necessary to operate and maintain Northline.

7. Service providers

Northline relies on service providers to operate the application, including:

• Shopify, which provides the commerce platform and Shopify APIs;
• Railway, which provides application hosting infrastructure;
• Neon, which provides managed PostgreSQL database infrastructure; and
• Resend, which provides transactional email delivery infrastructure.

These providers process information only as necessary to provide their respective services to Northline.

We may update our service providers as the application evolves while maintaining appropriate privacy and security protections.

8. Merchant and customer privacy requests

Shopify merchants and their customers may have rights relating to their personal data under applicable privacy laws.

Northline supports Shopify's mandatory privacy webhooks for customer data requests, customer redaction requests, and shop redaction requests.

For privacy-related questions or requests, contact:
northlinereorder@proton.me

9. International processing

Northline's service providers may process information in countries other than the country where the merchant or customer is located.

Where applicable, data is handled subject to the protections and contractual arrangements provided by those service providers and applicable law.

10. Changes to this Privacy Policy

We may update this Privacy Policy when Northline's features, data practices, legal requirements, or service providers change.

When we make material changes, we will update the effective date shown at the top of this policy.

11. Contact

Northline Group
Product: Northline Reorder
Email: northlinereorder@proton.me