Stocklio — Store Locator for Shopify
This Privacy Policy explains what information the Stocklio Store Locator application (the “App”) collects, why it is collected, and who it is shared with. The App is provided by Tetralogicx (“we”, “us”). By installing or using the App you accept the practices described here.
Two different groups of people interact with the App, and they are treated differently:
The App does not read orders, customer records, or any other personal data belonging to a merchant’s customers. It reads your store locations, products and collections, and it stores the location details you enter. Nothing else.
When you install the App, Shopify provides information about your store, which we store in order to run the App:
.myshopify.com store domainThe App exists to store and display your locations. Whatever you add by hand, import from a spreadsheet, or import from your Shopify locations is stored by us:
This information is intended for public display on your storefront. Please do not put personal information about individuals — a named employee’s private phone number, for example — into location fields.
If you enable the product finder, the App reads and stores your product, variant and collection details — titles, handles, images, prices, SKUs, tags and vendors — so that shoppers can see which of your locations carry a given product. This is catalogue data, not personal data.
If you contact us through the support form inside the App, we receive the email address and message you submit and use them only to answer you.
As with any web application, our servers record standard technical information such as IP address, browser type, requested URL and timestamp. These logs are used for security, debugging and abuse prevention.
The locator that appears on a merchant’s storefront is designed to work without shopper accounts. We do not ask shoppers to sign in, we do not set advertising or tracking cookies, and we do not build profiles of them.
We do not sell your information, we do not rent it, and we do not use it for advertising.
We share information only with the providers needed to run the App, and only as far as each one requires:
| Provider | What it receives | Why |
|---|---|---|
| Shopify | API requests made on your behalf | Reading your locations, products and collections |
| Google Maps Platform or Mapbox | Addresses and search terms to geocode, plus map tile requests | Drawing the map and turning addresses into coordinates. Which provider is used depends on the key you configure, and those requests are billed to your own account under that provider’s terms. |
| Our email provider | The email address and message from a support request | Delivering support correspondence |
| Our hosting provider | All data stored by the App | Running the servers and the database |
| Public content delivery networks | The visitor’s IP address and browser details, as with any web request | Serving the fonts, icons and stylesheets used by the storefront widget |
We may also disclose information where we are legally required to, where it is necessary to enforce our terms or protect the rights and safety of others, or as part of a merger, acquisition or sale of assets — in which case we will take reasonable steps to keep it subject to this policy.
When you uninstall the App, Shopify notifies us and we immediately delete the access credentials we hold for your store, which ends our ability to call the Shopify API on your behalf.
The content you created — your locations, custom fields, filters, translations and appearance settings — is kept so that it is still there if you reinstall. You can ask us to erase it permanently at any time by emailing the address below, and we will do so within 30 days of confirming your request.
Server logs are kept only for as long as they remain useful for security and diagnostics.
Depending on where you are located, you may have the right to access, correct, export or delete the personal information we hold about you, to object to or restrict how we use it, and to complain to your local data protection authority. Most of your data is directly visible and editable inside the App itself; for anything else, contact us using the details below and we will respond within the period required by applicable law.
Shopify’s mandatory privacy webhooks — customer data request, customer redaction and shop redaction — are registered and received by the App. Because the App stores no shopper personal data, there is normally nothing for us to return or erase in response to a customer request.
Traffic to and from the App is encrypted in transit using HTTPS. Shopify access tokens are short-lived and refreshed automatically, they are never exposed to your storefront or to a shopper’s browser, and access to our production systems is limited to the people who need it. No system can be guaranteed completely secure, but we take these obligations seriously and will notify affected merchants without undue delay in the event of a breach involving their data.
Our service providers may process data in countries other than your own. Where that happens, we rely on those providers’ standard contractual protections for international transfers.
The App is a business tool for merchants and is not directed at children under 13. We do not knowingly collect information from children.
We may update this policy from time to time. The effective date below always reflects the current version, and we will tell merchants about material changes by email or through the App.
For any privacy question or request, including deletion of your data, contact Tetralogicx at ahmad@tetralogicx.com. We aim to reply to every request within a few business days.