⚡Webellio Restock Alerts

Privacy Policy

Effective date: June 21, 2026

Overview

Webellio Restock Alerts ("the App") helps Shopify merchants collect back-in-stock email sign-ups from storefront visitors and send restock notification emails when inventory returns. Webellio Restock Alerts is operated under the WebEllio brand. This policy describes how the App processes data based on its current implementation.

Public website: https://webellio.com

Data controller roles

Merchants are responsible for their store's customer-facing privacy practices, including obtaining appropriate consent before collecting visitor email addresses through the notify widget. WebEllio processes data on the merchant's behalf as a service provider to operate the App.

Merchant and shop data we process

  • Shop domain and shop display name
  • OAuth session and access tokens (stored for app authentication)
  • Widget and email template settings configured in the app admin
  • Onboarding progress and usage counters (subscribers, notifications)
  • Product and inventory-related identifiers received from Shopify webhooks and the Admin GraphQL API (for example inventory item and variant IDs)

This information is used to authenticate the merchant's store, operate the App admin, sync widget settings to the Online Store, and trigger restock notifications when inventory changes.

Storefront subscriber data we process

  • Email address submitted through the notify widget
  • Product ID, variant ID, titles, and optional product image URL
  • Subscription status (waiting, notified, unsubscribed)
  • Subscription and notification timestamps
  • Notification delivery status and related queue records
  • Unsubscribe token (used only for one-click unsubscribe links)

This information is used to record restock alert subscriptions, send notification emails when inventory returns, display subscriber and notification history to merchants, and honor unsubscribe requests.

The App does not query or store Shopify Customer profile records via the Customer Admin API in the current version.

Purpose of processing

  • Operating back-in-stock sign-up and notification features
  • Displaying subscriber and notification history to merchants
  • Syncing widget settings to the Online Store via shop metafields
  • Responding to mandatory Shopify privacy compliance webhooks

Data storage

Application data is stored in a PostgreSQL database managed by the App operator. OAuth sessions are stored in the same database via Prisma session storage.

Third-party services

The App may use the following categories of third-party services:

  • Email delivery — transactional email is sent through the Resend API when RESEND_API_KEY is configured
  • Hosting and infrastructure — application hosting provider selected by the App operator
  • Shopify platform APIs — Admin GraphQL, webhooks, and theme app extensions

Retention and deletion

The App does not apply a separate fixed retention schedule beyond the deletion events described below.

  • Subscriber records remain until the customer unsubscribes, the merchant uninstalls the app and Shopify sends a shop/redact webhook, or Shopify sends a customers/redact webhook for that email.
  • customers/data_request exports are stored securely in the application database for merchant fulfillment and removed on customer or shop redaction.
  • OAuth sessions are deleted on app uninstall (app/uninstalled) and shop redaction.
  • On shop/redact, all shop-associated app data — including subscribers, notification queue records, shop settings, compliance exports, and processed webhook records — is deleted.

Mandatory Shopify privacy webhooks

The App implements:

  • customers/data_request — exports matching subscriber records for the requested customer email
  • customers/redact — deletes subscriber records and stored compliance exports for the requested customer email
  • shop/redact — deletes all shop-associated app data after uninstall

Your rights and privacy requests

Merchants and customers may request access to, correction of, or deletion of personal information processed by the App. Shopify merchants can also use Shopify's mandatory privacy webhooks and uninstall flows, which may trigger deletion or cleanup as described above.

To submit a privacy request, email webellio4@gmail.com. Include your Shopify store URL and, when applicable, the customer email address related to the request.

Contact

Webellio Restock Alerts is operated under the WebEllio brand.

Privacy inquiries: webellio4@gmail.com

Website: https://webellio.com