Supplywren Privacy Policy

Effective: November 10, 2026. Publisher: Front Porch Puzzle Press ("we"). This policy covers the Supplywren app for Shopify.

Supplywren helps shops on Shopify decide what to reorder from their suppliers, make and send purchase orders, receive deliveries into stock, check supplier invoices, and keep each product's cost per item up to date. A shop ("merchant") installs Supplywren from the Shopify App Store. We process data on the merchant's behalf and only to run the app.

What Supplywren receives from Shopify

Shop details: the shop's name, myshopify domain, contact email, currency and time zone. The contact email is used as the Reply-To on purchase orders the merchant sends from the app.
Products: product and variant titles, SKU, barcode, price, vendor, status, the inventory item ID, whether inventory is tracked, current cost per item, and stock quantities (available, incoming, on hand) at each location.
Locations: names, IDs and addresses of the shop's locations (the address is printed on purchase orders as the delivery address).
Orders, without the buyer: to measure how fast products sell, Supplywren receives or reads each order's ID, created and cancelled dates, the point-of-sale location for in-store orders, and its line items (line ID, variant and current quantity). It stores, per order line, the order and line IDs, the variant, the quantity, the location and the day, and deletes them after 90 days. Supplywren asks Shopify to leave buyer fields out of these messages, and it never requests or stores a customer's name, email, phone, address or customer ID. Prices and payment details are not read or stored.
A Shopify access token for the shop, stored so the app can act for the merchant (to read products and orders, add received stock, show ordered stock as incoming, and write product costs).

What the merchant enters

Supplier records: name, and optionally a contact name, email and copy email, phone, website, address, account number, payment terms, lead time and notes. These are the merchant's own business contacts.
Supplier price lists, purchase orders, deliveries and supplier invoices, with quantities, costs, shipping and fees, and notes; and any CSV files the merchant imports.
Settings, including an optional email address for a daily reorder list.

What Supplywren does with it

Calculates reorder suggestions, keeps purchase orders and their deliveries, adds received stock to the merchant's Shopify inventory when the merchant receives a delivery, shows ordered stock as "incoming" in Shopify if the merchant leaves that on, writes each received product's cost to Shopify's "Cost per item" if the merchant leaves that on, and produces purchase-order PDFs and CSV files, shelf labels and, if the merchant asks for it, purchase-order emails to the merchant's supplier and a daily reorder email. Nothing else. No analytics, tracking, advertising or profiling; no selling or sharing of data; no use of data to train AI or machine-learning models.

Where data is kept, and who processes it

Railway (hosting and the PostgreSQL database), in the United States.
Shopify, which the merchant already uses; Supplywren reads from and writes to the merchant's store through Shopify's Admin API.
An email delivery provider (such as Resend), only if sending from the app is turned on: it receives the purchase order (to the supplier address the merchant entered) or the daily reorder list (to the merchant's own address). Without it, the merchant sends purchase orders from their own email.

When a shop installs or uninstalls Supplywren or its plan changes, the publisher may receive a short notice with the shop's myshopify domain, the plan, its price and the time, sent through an email provider. It contains no other shop or customer information.

Data is encrypted in transit (HTTPS) and at rest on the hosting provider's storage. Access to production systems is limited to the publisher.

Retention and deletion

While the app is installed, data is kept so purchase orders, deliveries and cost history stay complete. Sales lines older than 90 days are deleted automatically by the daily job.
When the merchant uninstalls Supplywren, the Shopify access token is deleted at once. Shopify then sends a deletion request 48 hours later, and every record for that shop (products cache, sales lines, suppliers, price lists, purchase orders, deliveries, cost history, settings) is permanently deleted when it arrives. Reinstalling within those 48 hours keeps the data.
Customer data requests and customer erasure requests from Shopify are answered; because Supplywren holds no customer data, there is nothing to report or erase.

Your rights

Depending on where you live (for example under the GDPR or the CCPA/CPRA) you may have rights to access, correct, delete or port personal data. Merchants can download their purchase orders and cost history as CSV in the app at any time, and can contact us for anything else.

Children

Supplywren is a business tool for shop owners and is not directed to children under 13.

Changes and contact

We will post any changes on this page with a new effective date. Questions or requests: hello@frontporchpuzzlepress.com.