Privacy Policy

Who We Are

Athory provides inventory optimization for Shopify merchants. This policy explains how we handle your data when you use our service or visit athory.com. We process your data in compliance with the General Data Protection Regulation (GDPR) and applicable Danish law.

Data controller: Athory, Denmark. sales@athory.com

What We Collect

Account data

Email address, name, and login activity when you create an account. Your password is securely hashed and never accessible to us.

Shopify store data

When you connect your store, we access orders, products, inventory levels, fulfillments, refunds, returns, and location data through Shopify's API. This data powers our demand forecasts, safety stock calculations, and reorder recommendations.

Contact form data

Name, email, company, and message when you submit a form on our website.

Usage data

Page views, performance metrics, and anonymized interaction data collected through analytics tools on our website. See our Cookie Policy for details.

Billing data

Subscription plan and status. All payment processing is handled by Shopify — we never see or store your payment card information.

What we do not collect

We do not store personal data of your customers(the shoppers who buy from your store). We process order data for demand analysis only and do not retain end-consumer names, emails, or addresses. We respond to Shopify's mandatory GDPR webhooks confirming we hold no customer data.

Why We Process Your Data

We use your data to provide the service (inventory optimization, account management, billing), respond to your inquiries, improve our product through analytics, and maintain service reliability through error tracking.

Legal Basis

• Contract: account data, Shopify integration, and billing — necessary to provide the service you signed up for.
• Legitimate interests: analytics, error tracking, and security — to keep the service reliable and improve it.
• Consent: contact form submissions and marketing communications. You may withdraw consent at any time.

Who We Share Data With

We use third-party service providers to operate the service. Key processors include: our cloud infrastructure provider (EU — Frankfurt) for hosting and data storage, Shopify for e-commerce integration and billing, and smaller providers for authentication, analytics, email delivery, error tracking, and CRM.

Each provider processes data under a data processing agreement. We do not sell your data or share it with advertisers.

International Transfers

Your primary service data is stored in the EU (Frankfurt, Germany). Some processors operate in the United States, United Kingdom, and Canada. For these transfers, we rely on the EU–U.S. Data Privacy Framework, Standard Contractual Clauses, and applicable adequacy decisions.

Retention

We retain your data while your account is active. When you delete your account, we delete all associated data — store data, forecasts, user credentials, and uploaded files. Contact form data is retained until you request its deletion. Analytics and error data follow each provider's standard retention periods.

Your Rights

Under the GDPR you can request access, correction, deletion, or portability of your data. You can also restrict or object to processing, and withdraw consent at any time. Contact us at sales@athory.com — we will respond within 30 days.

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

Changes

We may update this policy and will notify you of material changes by email or by updating the date above. Questions? sales@athory.com