Privacy Policy

Alfred Commerce ("we," "us," or "our") operates Alfred ("the Service"), an inventory intelligence platform for Shopify merchants, accessible at alfredcommerce.com and through the Shopify App Store.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Alfred. It applies to all merchants ("you" or "your") who install, access, or interact with Alfred, including our website, application, and related services.

By using Alfred, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

When you install Alfred via the Shopify App Store, we collect account information provided through Shopify OAuth, including:

• Shopify store name and store URL
• Store owner name
• Email address associated with your Shopify account

To provide our inventory intelligence features, we access the following data from your Shopify store via Shopify APIs:

• Product catalog information
• Sales and order history
• Inventory levels
• Location data (warehouse/store locations)
• Supplier information

We automatically collect information about how you interact with Alfred, including:

• Pages visited and features used within the application
• Clicks, navigation patterns, and session duration
• Device and browser information (IP address, browser type, device type, operating system)

If you visit our marketing website (alfredcommerce.com), we may collect data through cookies and tracking pixels for advertising purposes, including information about your visit, referral source, and interactions with our website content.

Alfred does not access, collect, or store personal data about your end customers (shoppers). Specifically, we do not collect:

• Customer names or contact information
• Customer email addresses
• Customer shipping or billing addresses
• Customer payment information or credit card details
• Any other personally identifiable information (PII) belonging to your customers

Our Service is designed exclusively for merchant-level inventory intelligence. We process order data only in aggregate for forecasting and analytics purposes, without retaining any individual customer details.

We use the information we collect to:

• Provide and operate Alfred's features: inventory tracking, demand forecasting, Purchase Plan generation, restock alerts, and other core functionality
• Determine your billing tier: we calculate your trailing 60-day net sales (annualized) to assign the appropriate pricing plan
• Send transactional communications: inventory alerts, low-stock notifications, Purchase Plan reminders, and product updates
• Improve our product: via anonymized analytics, session recordings, and aggregated usage patterns
• Ensure security and prevent abuse: monitoring for unauthorized access or fraudulent activity
• Communicate with you: respond to inquiries, provide customer support, and send important service updates

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have requested, including accessing your Shopify store data to deliver inventory intelligence features and determining your billing tier.
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our Service through anonymized analytics and session recordings, ensuring application security, and monitoring for errors and downtime. We balance these interests against your rights and freedoms.
• Consent: Where required, we obtain your consent for specific processing activities, such as marketing communications and the use of non-essential cookies and tracking pixels. You may withdraw your consent at any time.

We share data with the following categories of third-party service providers, solely to operate and improve the Service:

Shopify

Alfred integrates with Shopify APIs as its core data source. Your store data is accessed in accordance with Shopify's API Terms of Service and Partner Program Agreement.

Advertising Platforms

We use third-party advertising platforms (such as social media networks, search engines, and other digital advertising services) to market Alfred to prospective merchant users. These platforms may receive data through cookies and tracking pixels placed on our marketing website.

Important: These advertising tools are used solely to reach prospective merchants. They do not process or receive any data about your end customers.

Analytics, Monitoring & Product Improvement

We use third-party tools and services to monitor, analyze, and improve Alfred, including but not limited to:

• Application uptime and downtime monitoring
• Error tracking and debugging
• Session recordings of application usage (for product improvement)
• Anonymized user behavior analytics

Communications & CRM

We use third-party email, messaging, and customer relationship management tools to send transactional communications (such as inventory alerts and product updates) and manage merchant relationships.

Hosting & Infrastructure

We use third-party hosting, cloud computing, and infrastructure providers to run and maintain the Service. These providers may process your data on our behalf under strict contractual obligations.

Business Transactions

If Alfred Commerce is involved in a merger, acquisition, asset sale, financing, bankruptcy, or reorganization, your data may be transferred or disclosed as part of that transaction. We will notify you (via email or a prominent notice within the Service) before your data becomes subject to a different privacy policy.

Legal Disclosure

We may disclose your data if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

We do not sell your personal data to third parties. We only share data as described in this section and as necessary to comply with legal obligations.

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the application to function properly, including authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Used to understand how merchants interact with Alfred so we can improve the product experience. These collect anonymized usage data.
• Marketing Cookies & Pixels: Used on our marketing website (alfredcommerce.com) for advertising purposes. These help us measure the effectiveness of our advertising campaigns and reach prospective merchants. We may use pixels and tracking technologies from various advertising platforms.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Service.

Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no universally accepted standard for how companies should respond to DNT signals. We do not currently respond to DNT signals, but we respect your ability to control tracking through your browser's cookie settings and the opt-out mechanisms described in this policy.

All data collected by Alfred is stored on servers located in the United States.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls limiting data access to authorized personnel
• Regular security assessments and monitoring
• Secure authentication via Shopify OAuth

Payment security: Alfred does not collect, store, or process payment card information. All billing is handled through Shopify's billing API, which is PCI-DSS compliant. We never have access to your credit card or payment details.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining reasonable safeguards appropriate to the sensitivity of the data.

We retain your data for as long as you maintain an active subscription to Alfred. Upon cancellation or uninstallation of the application:

• Your store data and account information will be deleted within 90 days of subscription termination, unless retention is required by law
• Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely for product improvement purposes
• Billing records may be retained as required for tax, legal, or accounting obligations

You may request earlier deletion of your data at any time by contacting us at support@alfredcommerce.com.

Depending on your location, you may have the following rights regarding your personal data:

General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Opt-out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us

Additional Rights Under GDPR (EEA/UK/Switzerland)

• Restriction of Processing: Request that we limit how we use your data
• Object to Processing: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time
• Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights Under CCPA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you
• Right to Delete: Request deletion of personal information collected about you
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Opt-Out: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" option

To exercise any of these rights, please contact us at support@alfredcommerce.com. We will respond to your request within 30 days (or within the timeframe required by applicable law).

Your data is stored and processed in the United States. If you are accessing Alfred from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an adequate level of protection.

Alfred is a business-to-business service designed for Shopify merchants and is not directed at children under the age of 16 (or 13, where applicable under local law). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Notify you via email or through a prominent notice within the Service

We encourage you to review this Privacy Policy periodically. Your continued use of Alfred after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: