Privacy Policy

1. Who we are

Merchant Tools is the trade name of a French sole proprietorship (micro-entreprise) operated by Renaud Pothin, France. We publish back-office apps for online stores on the Shopify App Store and the Wix App Market.

Contact for anything related to personal data: support@merchanttools.eu. We answer within one business day (Europe/Paris).

2. Our role

• For the data of your store or site (products, prices, inventory, orders references, count sessions), you, the merchant, are the data controller and we act as your data processor: we process it only to run the app you installed, on your instructions, and never for our own purposes.
• For your account and support data (store or site identifier, plan, the email address you write to us from, support conversations), we are the data controller.

3. What each app stores

Every app keeps only the data it needs to do its one job, always scoped to your store or site. None of our apps reads or stores the names, addresses, emails or payment details of your customers.

Common to all apps

• Shopify apps: your store domain, an access token encrypted at rest, the store's contact email (used for two onboarding emails after installation and for support replies), your plan, your app settings, and a log of every write the app makes to your store.
• Wix apps: the app instance identifier and site identifier issued by Wix, the catalogue version of your site, your plan, your app settings, and a log of every write the app makes to your site. We do not store an access token: Wix issues short-lived tokens on each request. We do not store the site owner's email address, except the address you give when you agree to be contacted (see section 12): Wix provides it on request when an email is sent.

Support chat (in MT: Stocktake & Stock Count on Shopify and MT: Inventory Count & History on Wix): if you write to us through the chat bubble inside the app, we store your messages and our replies, the attachments you send, the email address you choose to leave, and to know which store we are helping: on Shopify the store name, its myshopify domain, the store contact email and the plan; on Wix the site name, its address, the site and app-instance identifiers and the plan. The chat runs on our own server (Chatwoot, open-source software hosted by us at OVHcloud, France); no chat provider receives these messages.

4. Your customers and site visitors

Our storefront components (the search bar and the Omnibus price line on Shopify themes, the Omnibus site plugin on Wix product pages) set no cookies and do not identify visitors. On Wix, the Omnibus plugin asks our server for the lowest price using a short-lived visitor token issued by Wix; we use that token only to identify which site is asking and discard it. Our hosting provider keeps technical access logs (IP address, browser user agent, requested URL) for a short period for security and debugging, then deletes them.

Barcode scanning in Stock Count and Serial & Lot Tracking is decoded on the phone itself. No camera image ever leaves the device.

5. Your staff

Some data relates to the people who work in your store rather than to your customers:

• The device name a person types when opening the phone counting page (for example “Warehouse 2”). It is stored with each scan so you can see who counted what.
• On Wix, the stock-movement journal stores the Wix user identifier (a technical ID, not a name) that Wix sends with each manual inventory change, so the journal can distinguish manual edits from orders. We do not look this identifier up or link it to a name.
• The Stock Count phone page keeps an offline queue of scans in the phone's browser storage until they are sent; nothing else is stored on the device.

You are responsible for informing your staff that these tools record their activity in the store.

6. Why we process data

• Performance of a contract (GDPR Art. 6(1)(b)): providing the app you installed and the plan you subscribed to.
• Legitimate interest (Art. 6(1)(f)): security, abuse prevention, debugging, and answering your support requests.
• Consent (Art. 6(1)(a)): the emails you agree to receive when you tick “Merchant Tools may email me about this app” (see section 12). You can withdraw it at any time, without affecting what was done before.
• Legal obligation (Art. 6(1)(c)): keeping billing-related records where the law requires it. Billing itself is handled entirely by Shopify or Wix; we never see card or bank details.

We do not sell data, do not use it for advertising, and do not use it to train machine-learning models.

7. Where data is hosted and who processes it

All application data is hosted in the European Union. Our sub-processors are:

No other third party receives your data. Until 28 September 2026 our apps ran on Fly.io (Paris) and Neon (Frankfurt). Both services have been stopped and, on 5 October 2026, the Fly.io applications and the Neon databases were deleted.

8. How long we keep data

• While the app is installed: catalogue, inventory and settings data is kept up to date and old entries are pruned. Price history is kept as long as needed to compute the lowest price of the reference period and for the reports of your plan. Completed count sessions and shrinkage entries are kept 30 days on free plans and up to 2 years on paid plans; the Wix stock-movement journal is capped at 2 years.
• Technical logs (webhook receipts, job queue): 7 to 30 days.
• Backups: encrypted copies of the databases are made every hour and kept for at most 35 days (hourly for a day, daily for a week, weekly for a month), then deleted. Data removed from an app therefore disappears from the backups within 35 days.
• Support emails: kept for up to 3 years after the last exchange, then deleted.
• Support chat conversations: kept for 24 months after the last message, then deleted automatically (or earlier on request).

9. Uninstalling and deletion requests

• Shopify: all data for your store is deleted immediately when you uninstall the app (except a consent to be contacted, if you gave one: see section 12), and again when Shopify sends its shop/redact request 48 hours later; it leaves our encrypted backups within 35 days. We also honour customers/data_request and customers/redact; as we hold no customer data, these return an empty record, except Serial & Lot Tracking, which returns and anonymises the order numbers it holds.
• Wix: when you remove the app, Wix notifies us, the app stops serving your site at once, and all data for your site is permanently deleted within 30 days, and from our encrypted backups within a further 35 days. Reinstalling within the first 30 days restores your settings. A consent to be contacted, if you gave one, is kept during those 30 days for one email (see section 12), then deleted with the rest.
• On request: email support@merchanttools.eu from the address linked to your store or site and we delete everything within 7 days, or send you an export of what we hold.

10. Security

All traffic is encrypted in transit (TLS). Shopify access tokens are encrypted at rest. Webhooks are verified by signature before being processed. Each app runs in its own isolated container with its own database and credentials. Access to production systems is limited to the publisher and protected by two-factor authentication. Every write an app makes to your store is logged and visible to you inside the app.

11. Cookies and tracking

This website sets no cookies and uses no analytics. Our apps' admin pages run inside the Shopify admin or the Wix dashboard and rely only on the session cookies of those platforms; we set none of our own, except the support chat of MT: Stocktake & Stock Count (Shopify) and MT: Inventory Count & History (Wix), which stores a conversation identifier in your browser (cookie cw_conversation) so that an open conversation continues across pages; it is used for nothing else and is not a tracking cookie. Storefront components set no cookies.

12. Emails we send

After installation, an app sends one setup email with the steps to activate it: on Shopify to the store's contact address, on Wix to the site owner's address that Wix provides, only if the owner's Wix email preferences allow it, with a one-click unsubscribe link. We send no newsletters and no marketing emails. Reply STOP to that email, or write to support@merchanttools.eu, and we will not email you again except to answer your own support requests. If you reply STOP, we keep only a record of that choice (your store domain and a one-way hash of the email address), even after you uninstall, so that it is still respected if you reinstall. Other emails are only the notices you choose to receive (for example an expiry alert sent to the address you enter in Settings) and replies to your support requests.

Consent to be contacted (our Shopify and Wix apps): if you tick “Merchant Tools may email me about this app” in an app, or accept the “Can we email you?” card on its home page, we keep the email address you agreed to, the store or site name, the date and, on Shopify, the admin language (on Wix, the app instance and site identifiers). On Wix the address is pre-filled with the site owner's address provided by Wix, and you can change it before agreeing. We may then email you about that app, for example to ask what is missing or to tell you about a fix you asked for, and we send one email after you uninstall it to ask what was missing. Untick the box in Settings, reply STOP, or use the unsubscribe link in our emails to withdraw your consent at any time. After uninstall, this record is kept only until Shopify's shop/redact request 48 hours later on Shopify, or until your site's data is deleted 30 days after removal on Wix, then deleted; it is deleted at once if you withdraw or ask us to delete your data.

13. Your rights

Under the GDPR you may ask for access, rectification, erasure, restriction, portability of your data, and object to processing based on legitimate interest. Write to support@merchanttools.eu; we answer within one month. You may also lodge a complaint with your supervisory authority, in France the CNIL (cnil.fr).

If you are a customer of a store that uses our apps, please contact the store directly: the merchant is the controller of their store's data and we act on their instructions.

14. Changes to this policy

We may update this policy when our apps or providers change. The date at the top indicates the current version; material changes are announced inside the affected app.

Our Omnibus Price & EU GARAN apps help you display price and guarantee information required by EU rules. They are not legal advice.