Privacy Policy

Waitivo · Back in Stock Alerts • Effective June 14, 2026

This Privacy Policy explains how Waitivo ("Waitivo", "we", "us") collects, uses, and protects information when a Shopify merchant installs our app and when shoppers join a back-in-stock waitlist through it. We collect the minimum data needed to do one job: email a shopper when a product they want is back in stock.

1. Information we collect

From shoppers (people who join a waitlist on a merchant's storefront):

Email address — to send the back-in-stock alert the shopper requested.
The product/variant the shopper is waiting on, their opt-in status, and timestamps.

We do not collect shoppers' names, addresses, phone numbers, or payment information.

From the merchant's store (to detect restocks and operate the app):

Store domain and basic shop details.
Product, inventory, and location data — accessed read-only via the Shopify scopes read_products, read_inventory, and read_locations. We request no write access and no access to Shopify customer records or orders.
App settings you configure (sender display name, email styling, thresholds, etc.).

2. How we use information

To send back-in-stock email alerts shoppers explicitly opted in to receive.
To confirm opt-in (double opt-in) and let shoppers unsubscribe at any time.
To show merchants aggregate analytics (signups, alerts sent, sales recovered).
To operate, secure, and support the app.

We do not sell personal information, and we do not use it for advertising.

3. Service providers (subprocessors)

We share data only with providers that help us run the service:

Shopify — the platform the app runs on.
Resend (and its email infrastructure, Amazon SES) — to deliver alert emails.
DigitalOcean — hosting and database infrastructure.

These providers process data only to provide their service to us.

4. Data retention & deletion

Shopper waitlist data is kept until the alert is sent and for a reasonable period after, or until the shopper unsubscribes or requests deletion.
When a merchant uninstalls the app, we purge that store's data.
We honor Shopify's mandatory GDPR webhooks: customers/data_request, customers/redact, and shop/redact — responding to data-access and erasure requests within the timelines Shopify requires.

5. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, or delete your personal information, or object to its processing. Shoppers can unsubscribe from any alert email. To make a request, contact us at hello@suitexa.com, or ask the merchant whose store you subscribed through — they can also submit a request on your behalf via Shopify.

6. Security

Data is encrypted in transit (TLS) and stored on access-controlled infrastructure. We limit access to the minimum necessary to operate the service.

7. Children

Waitivo is not directed to children under 16 and we do not knowingly collect their data.

8. Changes

We may update this policy; material changes will be reflected by a new effective date on this page.

9. Contact

Questions or privacy requests: hello@suitexa.com.