Tallyfold Privacy Policy

Last updated: September 2, 2026

What Tallyfold does

Tallyfold is a read-only restock planner for Shopify stores. It analyses your order history to recommend when and how much to reorder. The app uses read-only API permissions and cannot create, modify or delete anything in your store.

Data we access through the Shopify API

• Orders: order line items — product variant, quantity and date. We do not request customer names, email addresses, phone numbers or shipping/billing addresses.
• Products and inventory: titles, variants, prices, cost per item, stock levels and locations.

Data we store

• Aggregated daily sales per product variant (variant ID, calendar day, units sold) — this is what forecasts are computed from.
• Your app settings: supplier lead times, minimum order quantities and the supplier email addresses you choose to save.
• Orders you mark as placed inside the app, and the stock movements we use to measure how long a supplier actually takes to deliver.
• Messages you send in the support chat, and our replies. These are whatever you type — do not put customer details in them.
• A standard Shopify session record required for the app to authenticate with your store.
• A service log of how the app is used: which screens were opened, when a plan was built or a file exported, and technical errors — tied to your store domain, never to a person or a customer. We use it to keep the app fast and to see where merchants get stuck.

We store no personal data about your customers. Order records we receive via webhooks are reduced to anonymous daily totals.

Data we collect directly from you

None beyond the above. The app has no separate sign-up, no analytics trackers and no marketing pixels.

Tracking on your storefront

Tallyfold adds nothing to your storefront. No scripts, no cookies, no tracking of your visitors or customers.

How data is used

Solely to produce restock recommendations shown to you inside the app and in files you choose to export. We never sell your data and never use it to train anyone's models. Data is encrypted in transit and at rest.

Who else processes your data

Three companies, each for one job, and none of them receives anything about your customers:

• Railway — hosting. Everything listed above lives on their servers.
• Anthropic — the support assistant. When you write in the chat, that conversation and a summary of your plan (order count, days of history, how many items need ordering) are sent to their API so the assistant can answer. Nothing is sent if you never open the chat, and the assistant can be switched off for your store on request.
• Telegram — how we are notified that you wrote. Your message text and your store domain are sent so a human sees it and replies.

Your sales and stock figures are never sent to any of them beyond the hosting above.

Data retention and deletion

While the app is installed, data is kept only as long as it is useful for forecasting:

• Aggregated daily sales — up to two years, so seasonality can be measured.
• Order identifiers used to avoid double-counting a webhook — seven days.
• The service log of app usage and errors — sixty days.
• Your settings, marked orders and support chat — for as long as the app is installed.

If you uninstall Tallyfold, Shopify sends us a deletion request and we remove your store's data within 48 hours. You can also request deletion at any time by email.

One thing outlives deletion, and it holds nothing about you: a daily tally of how many stores installed or uninstalled the app — a date, an event name and a number, with no store domain, identifier or hash of either. It cannot be traced back to a store or a person; we keep it to know how many merchants arrive and leave each month.

GDPR

We honour Shopify's mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact. Because we store no customer personal data, customer data requests and redactions are confirmed immediately.

Contact

Questions about this policy or your data: nobolevsk@gmail.com