Privacy Policy
Last updated: 20 October 2026
Short version: Stupidify reads your products, stock and the last 60 days of orders to build a report about your store. It never reads customer names, emails, phone numbers or addresses. It stores only what it needs to show you that report. It does not sell data, track you or train AI on your data.
1. Who we are
Stupidify ("Stupidify", "we", "us") is a Shopify app that analyses a store's own sales, stock and catalog and reports what isn't working, with a fix for each problem. We are the controller of the data described here, based in Portugal. Contact: hello@stupidify.app.
2. What data we process and why
We process the minimum data needed to produce your report.
| Data | Source | Purpose |
|---|---|---|
| Store domain | Shopify, at install | Identify your store and link it to your settings and reports |
| Access token | Shopify, at install | Read your store data through the Shopify API when you open the app |
| Products and variants | Shopify API (read_products) | Titles, status, prices, cost per item, photo count and the first 200 characters of the description. Used for Dead Weight, Ghost Listings, Flying Blind and the rest |
| Inventory levels | Shopify API (read_inventory) | Stock on hand, for Dead Weight and Running on Empty |
| Orders from the last 60 days | Shopify API (read_orders) | Date, line items, quantities, amounts, discounts and refunds. Read to calculate the report, not stored as raw orders |
| Store currency and plan type | Shopify API | Show amounts in your currency and recognise development stores |
| Settings | You, in the app | Remember the tone you picked |
| Reports | Calculated by Stupidify | Show your latest report. Only the latest is kept: each new report replaces the previous one. It holds scores, totals and product names, never customer data |
| Subscription status | Shopify (Partner API) | Check that your plan is active. Checked live, not stored |
What we never read: customer names, emails, phone numbers or addresses, payment details, staff accounts, or orders older than 60 days. We have no access to customer scopes.
3. Legal basis (GDPR)
- Contract: processing needed to provide the service you installed (art. 6(1)(b)).
- Legitimate interests: keeping the service secure and preventing abuse (art. 6(1)(f)).
- Legal obligation: where the law requires us to keep or disclose data (art. 6(1)(c)).
4. How we store and protect it
Data is stored in a PostgreSQL database run by Supabase in the European Union (Ireland). The app runs on Vercel in the European Union. All connections use TLS. Data is encrypted at rest by our providers. Database access is limited to the app itself and to us for maintenance.
The access token is used only to read your store data when you open or refresh the app. The app's scopes are read-only: it cannot change anything in your store.
5. How long we keep it
- While the app is installed: your settings and your latest report. Older reports are deleted when a new one is made.
- When you uninstall: access tokens are deleted at once.
- 48 hours after uninstall: Shopify sends a deletion request (shop/redact) and we delete your settings and your report.
- Any time: email hello@stupidify.app and we will delete your store's data within 30 days.
6. Who processes it for us
These providers process data on our behalf, under data processing agreements. Transfers outside the EU are covered by Standard Contractual Clauses or the EU-US Data Privacy Framework.
| Provider | Role | Location |
|---|---|---|
| Shopify | Platform, app hosting in your admin, billing | Canada / United States |
| Vercel | Application hosting (EU regions) | European Union, global network |
| Supabase | Database | European Union (Ireland) |
| Cloudflare | Domain name system (DNS) | Global network |
We do not sell, rent or share your data with anyone not listed above.
7. No AI training, no automated decisions
Your data is not sent to any AI service and is not used to train models. The jokes are pre-written and filled in with your numbers. The report describes your store. It makes no decisions about you or your customers.
8. Your customers' data
Stupidify does not store data about your customers. When Shopify sends us a customer data request or a customer deletion request, there is nothing to return or delete, and we confirm that.
9. Your rights
Depending on where you are, you have the right to:
- Access: get a copy of the data we hold about your store
- Rectification: have wrong data corrected
- Erasure: have your data deleted
- Portability: get your data in a machine-readable format
- Restriction: ask us to limit how we use your data
- Objection: object to processing based on legitimate interests
Email hello@stupidify.app. We reply within 30 days. You can also complain to your local data protection authority. In Portugal, that is the Portuguese data protection authority (CNPD, www.cnpd.pt).
10. California residents (CCPA)
You have the right to know what personal information we collect, to ask for it to be deleted, and to opt out of its sale. Stupidify does not sell or share personal information. To use these rights, email hello@stupidify.app.
11. Shopify API access
Stupidify asks only for these read-only scopes:
- read_products: products, variants, prices, cost per item, photos count and descriptions
- read_orders: orders from the last 60 days, for sales, discounts and refunds
- read_inventory: stock levels
Stupidify cannot change anything in your store.
12. Cookies and tracking
The app inside Shopify admin uses no analytics cookies and no third-party tracking scripts. This website sets no cookies and uses no analytics or advertising trackers. To show prices in your currency, our host tells us your country from your IP address. We do not store it.
13. Security incidents
If a breach affects your data, we will tell you and the data protection authority as the GDPR requires.
14. Children
Stupidify is a business tool for Shopify merchants. It is not meant for anyone under 18.
15. Changes to this policy
We may update this policy. The date at the top always shows the latest version. We will announce important changes in the app before they take effect.
16. Contact
For privacy questions, data requests or concerns: hello@stupidify.app.