Privacy Policy for Potato

Effective Date: October 14, 2025

1. Introduction

Potato ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

Potato is based in Georgia, United States. Our services are provided from the United States and your data is stored on servers located in the United States.

2. Information We Collect

Important Notice: Potato does NOT collect or store any customer personal data. We only collect store owner information and product/inventory/order metadata for inventory management purposes. Your customers' personal information (names, emails, addresses, phone numbers) is never accessed or stored by Potato.

2.1 Store Owner and Business Data

When you install Potato, we collect and process the following information from your Shopify store:

  • Store owner information: Your name and email address (the person who installed the app)
  • Product information: Product names, SKUs, variants, pricing, and costs
  • Inventory data: Stock levels and location information
  • Order metadata: Order IDs, order numbers, dates, product quantities, and total amounts (we do NOT collect customer names, addresses, emails, or any customer personal information)
  • Store configuration: Store settings and preferences

2.2 Usage Data

We automatically collect certain information about how you use the app, including:

  • Log data (IP address, browser type, access times)
  • Feature usage and interactions within the app
  • Error reports and performance data

2.3 Customer Personal Information - What We Do NOT Collect

⚠️ Potato does NOT collect, access, or store ANY customer personal information from your store.

Specifically, we do NOT collect or have access to:

  • Customer names
  • Customer email addresses
  • Customer phone numbers
  • Customer physical addresses (shipping or billing)
  • Customer geolocation data
  • Customer IP addresses or browser information
  • Customer payment information
  • Drop cookies or tracking technologies on customer devices
  • Track customer browsing behavior on your store

What we do access: We only access order transaction metadata (which products were ordered, quantities, order dates, and order totals) for sales velocity analytics to help you manage inventory reordering. This data contains no customer personal information.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Potato app functionality
  • Calculate reorder quantities based on sales velocity and inventory turnover
  • Generate purchase order recommendations
  • Reconcile received inventory against purchase orders
  • Improve and optimize app performance
  • Provide customer support
  • Send administrative information and updates
  • Comply with legal obligations

4. Data Storage and Security

Your data is stored on secure servers located in the United States. We use industry-standard encryption and security practices to protect your data against unauthorized access, alteration, disclosure, or destruction.

Data Location: All data is stored and processed in the United States. If you are accessing Potato from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

Important: Potato is a read-only application for inventory data. We never write to or modify your Shopify inventory levels. We only read inventory data to perform calculations and reconciliation.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

5.1 Third-Party Service Providers

We use the following third-party services to operate and improve Potato:

  • Railway: Cloud hosting provider for application infrastructure (data stored in US)
  • Sentry: Error tracking and monitoring service to improve app stability
  • PostHog: Product analytics to understand feature usage and improve user experience

These service providers have access only to the data necessary to perform their functions and are obligated to maintain the confidentiality and security of your information.

5.2 Legal Requirements and Business Transfers

  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. When you uninstall the Potato app, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal or compliance purposes.

7. Your Rights (Store Owner Data)

As a store owner using Potato, you have the right to:

  • Access the information we hold about you and your store
  • Request correction of inaccurate information
  • Request deletion of your store data (automatically happens when you uninstall the app)
  • Object to or restrict certain processing of your information
  • Request a copy of your data in a portable format

To exercise these rights, please contact us using the information provided below. Note: Since Potato does not collect customer personal information, customer data requests should be directed to Shopify, not to us.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), we process your personal data in accordance with the General Data Protection Regulation (GDPR). Our legal basis for processing includes:

  • Performance of a contract with you
  • Our legitimate business interests
  • Compliance with legal obligations
  • Your consent (where applicable)

9. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information:

9.1 Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you. This includes:

  • Categories and specific pieces of personal information we collect
  • Categories of sources from which we collect personal information
  • Business or commercial purpose for collecting personal information
  • Categories of third parties with whom we share personal information

9.2 Right to Delete

You have the right to request that we delete your personal information, subject to certain exceptions allowed by law.

9.3 Right to Opt-Out of Sale

We do not sell your personal information. Potato has never sold personal information in the past 12 months and does not sell personal information.

9.4 Right to Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights. We will not discriminate against you for exercising any of your CCPA rights.

9.5 Exercising Your CCPA Rights

To exercise your rights under the CCPA, please contact us at support@potatoinventory.com. We will respond to verifiable requests within 45 days. You may designate an authorized agent to make a request on your behalf.

10. Children's Privacy

Potato is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

12. International Data Transfers

Potato is based in the United States. If you are accessing our services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

By using Potato, you consent to the transfer of your information to the United States. The United States may have data protection laws that are different from the laws of your country.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@potatoinventory.com

Website: https://potatoinventory.com

Location: 1313 Fords Pointe Xing, Savannah, Georgia, United States