Privacy Policy

Who we are

Forestock is a Shopify application operated as an independent product. When you install Forestock on your Shopify store, you're entering into an agreement with us to process your store's data for the sole purpose of generating inventory forecasts.

What data we collect

We request access to specific Shopify data to power forecasts. We collect only what is necessary:

• Order history — quantity, SKU, order date, and fulfilment status. We access orders beyond 60 days to detect seasonality and calculate stable demand velocity. Customer names, emails, and addresses are never stored.
• Product & inventory data — product titles, variants, SKUs, and current stock levels.
• Store metadata — your shop domain and currency, used to associate your data with your account.

We perform a one-time historical sync when you install Forestock. After that, only new orders are synced incrementally. We never repeatedly pull your full order history.

How we use your data

Your data is used exclusively to generate inventory forecasts and reorder recommendations for your store. Specifically:

• Calculating demand velocity per SKU
• Detecting seasonal patterns across 12–24 months of history
• Estimating stockout risk and suggesting reorder points
• Generating AI-driven forecast explanations visible only to you

We do not use your data to train AI models, benchmark against other merchants, or for any purpose outside of delivering the Forestock service to you.

Data sharing & third parties

We do not sell, rent, or share your store data with any third party. Period.

We use the following infrastructure providers to operate the service:

• Neon — our cloud PostgreSQL database provider, where your store data is stored. Data is encrypted at rest and in transit.
• Shopify — we receive data through the official Shopify API and adhere to Shopify's Partner data handling requirements.

Data retention & deletion

Your data is retained for as long as your store has Forestock installed. When you uninstall the app:

• We receive a mandatory uninstall webhook from Shopify
• All data associated with your store is soft-deleted immediately and permanently purged within 30 days
• You may also request immediate deletion by contacting us

Security

We take reasonable and industry-standard steps to protect your data:

• All data is encrypted in transit (TLS) and at rest
• Row-level security ensures each store's data is strictly isolated
• Shopify OAuth tokens are stored securely and never exposed client-side
• We do not store customer PII (names, emails, addresses) at any point

Your rights

Depending on your location, you may have rights under GDPR, CCPA, or similar regulations. You can:

• Request a copy of the data we hold about your store
• Request correction of inaccurate data
• Request deletion of all your store's data
• Withdraw consent by uninstalling the app at any time

Contact us

If you have questions about this policy or want to exercise your data rights, reach out:

Forestock

Email: privacy@forestock.tech