Kogu ("we", "us") provides inventory operations software for Shopify retailers — restocking, stockroom tracking, and inventory counts. This policy describes what data we process, why, and the choices available to merchants and their staff.
Data we process for merchants
- Store data: your Shopify store domain, locations, and API connection credentials (encrypted at rest).
- Catalog data: products, variants, SKUs, barcodes, images (as URLs), tags, and product types.
- Inventory data: per-location quantities, stockroom assignments, restock quantities, and count records.
- Order-derived data (minimized): when an order is fulfilled, we record only the order number, the fulfillment location, and the product line items (product, variant, quantity). Customer names, emails, addresses, and payment details are never stored by Kogu.
- Staff activity: for the audit trail, we record which staff account performed scans, restocks, exceptions, and counts, with timestamps.
How we use it
Exclusively to provide the service: syncing your catalog, generating restock lists, tracking stockrooms, reconciling counts to Shopify, and giving store owners an audit trail. We do not sell data, share it with advertisers, or use it to train AI models.
Where it lives
Data is stored with our infrastructure providers — Supabase (database) and Vercel (application hosting) — with per-store isolation enforced at the database layer. Staff devices keep a local copy of your catalog for offline speed; it can be erased from any device via Settings → Log Out of Store.
GDPR & data requests
We implement Shopify's mandatory compliance webhooks. When a customer requests their data or its deletion through your store, Shopify notifies us automatically; since we don't store customer personal data, there is typically nothing to return, and any order references are deleted on redaction requests. When a store uninstalls Kogu, all of that store's data is purged following Shopify's shop-redaction schedule (48 hours after uninstall).
Retention
Store data is retained while Kogu is installed and deleted after uninstallation per the above. Operational logs are retained for up to 90 days for troubleshooting.
Contact
Questions or requests: support@kogu.co.