StockDockPrivacy policy
Last updated 31 October 2026
In short:
- StockDock keeps what it needs to do your shop's paperwork: your business details, your orders' invoices, your customers' contact details from Shopify, and your stock records.
- It is stored in the European Union, each shop in a database of its own, and backed up every night, encrypted.
- No tracking cookies, no analytics, no advertising. We never sell or share data for marketing.
- When you uninstall, Shopify asks us 48 hours later to erase your shop, and we do.
Who we are
StockDock is an app for Shopify merchants, made by Florin Studios, South Africa ("we", "us"). This policy covers the StockDock app and this website, getstockdock.com.
Questions about privacy go to support@getstockdock.com. That address also reaches our Information Officer under South Africa's Protection of Personal Information Act (POPIA).
Our role
- For your customers' details, you, the merchant, decide what is collected and why, and we handle it on your behalf. Under POPIA we are your operator; under the EU's GDPR, your processor. If one of your customers has a question about their data, they should ask you, and we will help you answer.
- For your own account details (your shop, your business details and how you use StockDock) we are the responsible party, or controller.
What StockDock holds
About your shop and business
- From Shopify: your shop's name and address, myshopify.com domain, country, currency, timezone and phone number, and your StockDock plan and its status.
- What you enter in StockDock: your legal and trading names, registration and tax numbers, address, email, phone, website, logo, and the banking details you want printed on your documents.
- On the Premium plan, only if you use them: each location's own name, address, logo and banking details for its documents, the email of the manager who gets its end of each day, and the name and email of the accountant you give access to your books.
- The keys Shopify gives StockDock to read your shop, kept encrypted.
About your staff
- The user number Shopify gives each staff member, to record who did what, and when each last opened StockDock. StockDock does not receive your staff's names or email addresses from Shopify.
- On the Premium plan, the name you give a staff member in StockDock, if you give one, and what you let each do. The activity log then shows that name.
About your customers
- From Shopify: the customer's name, email, phone and billing address, including company name, and where the order was sent (the recipient's name and delivery address), when an order has a customer.
- A tax number, only if your staff type one on a quote or proforma.
- On each invoice, credit note, quote and proforma: the buyer's details as they were when it was issued.
About your sales and stock
- Your orders, refunds and payments as Shopify records them: amounts, dates, order numbers and the name of the payment method. StockDock never sees card details.
- Your suppliers' contact details, purchase orders, deliveries, stock counts and transfers.
- A record of changes made in StockDock, kept so the history of each document can be shown.
When you visit this website
- The website sets no tracking cookies and runs no analytics. Our host, Cloudflare, processes visitors' IP addresses and request details to deliver the pages and protect them from attacks.
What we use it for
- To make your documents, reports and stock records, and to keep Shopify's inventory in step with your stock work.
- To know which plan your shop is on, from Shopify.
- To keep StockDock working: backups, fixing errors and answering your support requests.
We do not use your data, or your customers', for advertising or profiling. We do not sell it. StockDock emails a customer only when you send them a document from it, or turn on sending invoices as orders come in; a message you send by WhatsApp or a link goes from your own phone or app. Those emails go through Resend, Inc., in the United States, which keeps their content and logs on its servers there under standard contractual clauses; your shop's records stay in the European Union.
A link you make to a document can be opened by anyone who has it, without signing in, until you stop it; each opening is counted for you, and nothing more is learnt about who opened it. On the Professional plan and up, a customer signed in to your online store can see their own invoices from their account: the app answers only for that customer's own orders.
On the Premium plan, the link you give your accountant opens your shop's reports and its invoices and credit notes, read-only, to anyone who has it, until you stop it or make a new one. Each opening is counted, and each reading is noted in your access log under the accountant's name.
Where it is kept, and who else handles it
| Who | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Runs StockDock and this website, and stores your shop's records. If you put your links on your own domain, Cloudflare also holds that address's certificate | Records stored in the European Union. Requests pass through Cloudflare's network on the way |
| Backblaze, Inc. | Holds the nightly backups, encrypted before they leave Cloudflare | Backblaze's EU region |
| Resend, Inc. | Sends the emails you send from StockDock, and those it sends for you (invoices as orders come in, reminders, statements, the month's reports and archive, the end of each day to a location's manager, your accountant's link): the message, its attachments, and the address it goes to | United States, under standard contractual clauses; the content and logs of each email stay on Resend's servers there |
| The European Commission (VIES) | Checks an EU VAT number when you ask it to, on the Professional plan and up: the number alone is sent | The Commission's VIES service, in the European Union |
| Telegram | Tells us when a backup or part of the app fails. These alerts carry counts and where something failed, with email addresses and long numbers removed | Telegram's servers |
| Shopify | Where your data comes from, and where stock changes are sent | Under Shopify's own privacy policy |
Florin Studios is in South Africa and your records are stored in the EU, whose data protection law POPIA recognises as giving adequate protection.
How long it is kept
- While StockDock is installed, your records are kept, so your invoice history stays complete.
- When you uninstall, StockDock's keys to your shop are deleted at once and it stops reading from Shopify. 48 hours later Shopify asks us to erase your shop's data, and StockDock erases your shop's records within the hour. If Shopify's request never arrives, StockDock erases them 7 days after you uninstall anyway. Installing again before then keeps them. Download your reports and save your documents before you uninstall.
- Backups are deleted after 28 days, so nothing is kept in them for longer than that after it is erased.
- Our own records: after a shop is erased we keep its myshopify.com domain, the dates it installed and uninstalled, its plan, and the privacy requests Shopify sent about it, as proof of what was done. Of a customer's request we keep only the customer's Shopify number, not their email or phone.
- Error logs: when something fails, the error is logged at Cloudflare with email addresses and long numbers removed, and kept there for no more than 7 days.
Your customers' requests
Shopify passes on your customers' privacy requests, and StockDock answers them:
- A request for their data appears on StockDock's home page and on its customers' data requests page, for you to download and give to the customer.
- A request to erase them removes their name, email, phone, tax number and address from your customer records, quotes and proformas. Issued tax invoices and credit notes keep the buyer's details as issued: tax law requires them to be kept unchanged, for five years in South Africa, and the GDPR allows this. They go when your shop is erased.
How it is protected
- Everything travels over HTTPS.
- Each shop's records sit in a separate database. In the app, they open only with the sign-in Shopify gives that shop's own admin.
- Shopify's keys to your shop are encrypted, and are never put into backups.
- Backups are encrypted (AES-256) before they leave Cloudflare.
Your rights
You may ask what we hold about you, ask us to correct it, or ask us to erase it. Write to support@getstockdock.com. If you are not satisfied with our answer, you may complain to South Africa's Information Regulator (inforegulator.org.za), or, in the EU, to the data protection authority where you live.
Children
StockDock is a tool for businesses, not meant for children, and we do not knowingly collect children's data for ourselves.
Changes
If this policy changes, the new version goes on this page with a new date. If a change matters to how your data is handled, we will tell you in StockDock before it takes effect.
Florin Studios, South Africa