When you use Posto, you decide what store data Posto handles and why, and Posto processes it only to provide the app to you. Posto doesn't read your customers' personal details.
You, the merchant, are the controller of your store's data. [Company legal name] ("Posto") is the processor and handles it only on your instructions, which are to provide Posto as described in our terms and privacy policy.
Posto doesn't process customer names, email addresses, phone numbers, shipping addresses, or payment details.
To forecast demand, recommend reorders, create and email purchase orders, record deliveries, calculate landed cost, and update inventory and, if you choose, cost per item in Shopify.
We'll update this list before adding a new subprocessor. [Confirm data regions and transfer safeguards.]
Posto limits access to what's needed to run and support the app and encrypts data in transit. [Confirm encryption at rest, access controls, and breach notification timing.]
Anyone who works on Posto with access to your data is bound to keep it confidential.
Posto doesn't hold your customers' personal details. If you receive a privacy request that involves data Posto holds, email support@meetposto.com and we'll help. [Confirm how Posto handles Shopify's privacy webhooks.]
You can export your data at any time. When you uninstall, Posto deletes your store's data about 48 hours later, keeping only a scrambled marker showing your store has used its free trial.
If we become aware of a breach affecting your data, we'll tell you without undue delay and share what we know. [Attorney to confirm the required timing.]
Email support@meetposto.com.