StockMatch Privacy Policy
StockMatch is a Shopify app made by Arctis Labs ("we", "us"). It keeps a Shopify store's stock and prices in sync with the store owner's eBay listings, and can bring eBay orders into Shopify. This policy explains what data the app handles, why, who else sees it, and how it gets deleted. It also covers the StockMatch waitlist page.
Questions or requests: rollie@arctislabs.com.
Who this is about
- Merchants: Shopify store owners and staff who install StockMatch.
- Buyers: people who buy from a merchant on eBay. For buyers, the merchant is in charge of the data and we process it for them. Buyers should send privacy requests to the merchant they bought from.
- Waitlist sign-ups: people who join the StockMatch waitlist before launch.
What we collect
From Shopify, when a merchant installs the app
- The store's domain, currency and an access token Shopify issues so the app can work with the store.
- Product data for the products a merchant chooses to sync: titles, descriptions, images, variants, SKUs, prices and stock levels at the merchant's locations.
- The merchant's Shopify plan for StockMatch (Starter, Growth or Pro), which Shopify bills.
From eBay, when a merchant connects an eBay seller account
- The eBay user ID and username.
- Sign-in tokens eBay issues to the app. We encrypt them (AES-256-GCM) before storing them.
- Listing details: offer and listing IDs, categories, and the seller's chosen eBay business policies and inventory location.
- Orders: the eBay order ID, total, currency, and each line's SKU and quantity, so the app can lower Shopify stock and send tracking back to eBay.
Buyer details on eBay orders
On the Growth and Pro plans, StockMatch creates a Shopify order for each eBay sale so the merchant can ship it from Shopify. To do that it reads the buyer's name, eBay username, email, phone and shipping address from eBay and passes them to the merchant's Shopify store (the username goes in the order note). We don't store these details in our database. They pass through our servers only while the order is being created. On the Starter plan the app only lowers stock. eBay still includes buyer details in the order data it sends, but the app doesn't use them or pass them on.
For each eBay order we keep a short record so no sale is lost or imported twice: the eBay and Shopify order numbers, the order total and currency, and the SKUs and quantities sold. It has no names, addresses, emails or phone numbers.
Settings and activity
- The merchant's sync settings: pricing rules, stock buffer, price floor, and the email for alerts.
- An activity log of sync events (for example "price blocked by the floor" or "eBay rejected an update"), shown to the merchant in the app.
Waitlist
If you join the waitlist we collect your email, your store URL if you give it, your answers to the short questions on the form (current tool, eBay order volume, the plan you're interested in, and the problem you want solved), and the campaign tags in the link you followed (utm_source, utm_medium, utm_campaign).
What we don't do
- We don't sell data or share it for advertising.
- We don't use advertising or analytics cookies in the app or on the waitlist page.
- We don't collect payment card details. Shopify handles all billing.
How we use it
- To run the sync the merchant asked for: push stock and prices to eBay, publish listings, import orders, and send tracking to eBay.
- To enforce the merchant's safety rules, such as never listing below their price floor.
- To email the merchant alerts about problems that need them. Every plan gets urgent alerts (an eBay order that didn't reach Shopify, a price blocked by the floor, an eBay connection problem, the nightly check finding a mismatch). Growth and Pro also get the other warnings.
- To answer support requests and fix problems.
- For the waitlist: to tell you when StockMatch launches, and to ask follow-up questions about your answers.
Who we share it with
We only share data with the services the app needs to run:
| Service | What for | Where |
|---|---|---|
| Shopify | The merchant's store, orders and billing | Shopify's regions |
| eBay | The merchant's listings, stock, orders and tracking | United States (eBay US) |
| Vercel | Hosting the app and running its scheduled sync | United States (US East) |
| Neon | The app's database | United States (AWS us-east-1) |
| Resend | Sending alert emails | United States |
We may also disclose data if the law requires it, or to a buyer of Arctis Labs or the app if the business changes hands, under this same policy.
Where the data is kept
The app and its database run in the United States. If you're outside the US, your data is transferred there.
How we protect it
- All traffic is encrypted in transit (HTTPS).
- eBay tokens are encrypted before they're stored.
- Requests from Shopify and eBay are verified (signed webhooks and OAuth) before the app acts on them.
- Only the people who run StockMatch can access the production systems.
How long we keep it, and deletion
- While the app is installed, we keep the data above so the sync can work.
- When a merchant uninstalls, syncing stops and the Shopify access token is deleted at once. Shopify then sends a deletion request 48 hours later, and we delete the store's settings, eBay connection, listing links, order records and activity log.
- Disconnecting eBay in the app deletes the stored eBay tokens straight away.
- If eBay tells us an eBay account was closed (eBay's account deletion notice), we delete that eBay account's connection and its listing links.
- Buyer requests that Shopify forwards to us (customer data requests and redaction requests) are handled automatically. For a data request we report the order records above for that buyer's orders. For a redaction request we clear the order total and the items sold, keeping only the order numbers so the sale isn't imported again.
- Waitlist data is kept until you ask us to delete it, or until we stop running the waitlist.
- Server logs (errors and request records, which can include store domains and order IDs) are kept by our host for a short period and then deleted automatically.
Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, the CCPA or Thailand's PDPA), you can ask to see the data we hold about you, correct it, delete it, or object to how we use it. Email rollie@arctislabs.com and we'll reply within 30 days. Merchants can also delete their store's data at any time by uninstalling the app. If you bought something from a merchant on eBay, contact that merchant first, since they control your order data.
Children
StockMatch is a business tool. It isn't meant for children, and we don't knowingly collect data from them.
Changes
If we change this policy we'll update the date at the top. If a change affects how we use merchants' data, we'll tell them in the app or by email before it takes effect.
Contact
Arctis Labs
rollie@arctislabs.com
StockMatch is an independent app. It isn't made or endorsed by eBay or Shopify. eBay is a trademark of eBay Inc. Shopify is a trademark of Shopify Inc.