Privacy policy

StockMill is operated by JonesLabs LLC, Atlanta, Georgia, USA ("we", "us"). This policy explains what data StockMill handles when you use it at stockmill.app or as an app installed in your Shopify, Etsy, or eBay account, and what we do with it.

The short version: we read the minimum your shops need to share for us to count parts and update quantities, we never handle your buyers' personal details, and we delete your shop credentials within 48 hours of you disconnecting.

Data you give us

• Account details: your name, email address, and business name.
• Inventory you enter: Parts, Builds, locations, stock counts, purchase orders, vendor names, and alert thresholds.
• Contact form: your name, email, and message, delivered to our mailbox through Resend and kept only there.
• Beta invite request: your email address, kept as a contact in our Resend account so we can send you the invite. Every message we send that way carries an unsubscribe link, and unsubscribing removes you from future sends.
• Billing: handled by Shopify (for App Store installs) or Polar.sh (for direct signups). We never see or store card numbers.

Data we read from your connected shops

When you connect a channel, we read only what is needed to keep stock right:

• Listings, variants, and offerings, with their SKUs and ids, so we can link them to your Parts and Builds.
• Paid, canceled, and refunded orders, limited to the SKU, quantity, order and line ids, and timestamps.
• Your locations.
• Listing quantities, once, if you choose to seed your initial stock from that channel.

We do not read or store buyer names, email addresses, shipping addresses, phone numbers, messages, or payment details. Our order processing discards everything except the fields above before anything is written, and our logs never contain order payloads.

What we write to your shops

One thing: the available quantity on listings that share a SKU with a Build or Product in StockMill. We never create, edit, or delete listings, and we never change titles, prices, descriptions, or photos. You choose when to turn quantity updates on, per channel.

How we use data

• To compute stock levels and how many of each Build you can sell.
• To push quantities to your listings and to keep a movement history you can audit.
• To send low-stock alerts and daily digests to the email on your account.
• To count orders per month for billing, and to contact you about your account.

We do not sell data, share it with advertisers, or use it to train models. Aggregate, non-identifying usage numbers (for example, total orders processed) may appear in our own reporting.

Where data lives and who else touches it

StockMill runs on Railway in the United States, with data in Postgres and Redis there. Shop access tokens are encrypted at rest with AES-256-GCM using per-tenant keys. The processors we rely on are Railway (hosting), Resend (transactional email), Shopify and Polar.sh (billing), and the shop platforms you connect (Shopify, Etsy, eBay), each under its own terms.

Retention and deletion

• Shop access tokens are deleted within 48 hours of you disconnecting a channel or uninstalling the app.
• Order line data is deleted 90 days after you close your account.
• Your inventory, Builds, purchase orders, and movement history are kept while your account is open and deleted with it. Email us to close your account and delete everything sooner.
• For Shopify installs we honor Shopify's data request, customer redaction, and shop redaction webhooks. Because we never store customer data, customer requests have nothing to return or redact; shop redaction deletes the shop's data on our side.

Cookies

A session cookie signs you in. There are no advertising or cross-site tracking cookies. The marketing site at stockmill.app sets no cookies at all.

We measure site traffic with a self-hosted copy of Umami, an open source analytics tool. It uses no cookies, stores no IP addresses, and does not identify you or follow you across other sites. It also records anonymous session replays (page views, scrolling, and clicks) so we can see where the site is confusing. Anything you type into a form is masked and never recorded. The data stays on our own server and is never shared or sold.

Your rights

You can export your inventory data, correct it, or ask us to delete it at any time through the contact form. We reply within a few business days. If you are in the EU, UK, or California, the rights those laws give you apply, and we will honor them.

Platform notices

The term "Etsy" is a trademark of Etsy, Inc. StockMill uses the Etsy API but is not endorsed or certified by Etsy, Inc. Shopify and eBay are trademarks of their respective owners; StockMill is an independent product.

Changes and contact

If this policy changes in a way that matters, we email account holders before it takes effect. Questions go through the contact form.