Privacy Policy

Who we are

ReceiveKit is a Shopify embedded admin app operated by Trevor Otterson. Contact: ecomsupport@akalonai.com.

The app helps merchants receive purchase orders (including partials), print barcode labels from the receive, and lock unit cost at receipt. It is not a full WMS.

What we collect

When you install and use the app, we store:

• Shop domain — the Shopify store identity (for example, your-store.myshopify.com).
• OAuth / session tokens — credentials needed to keep the embedded app authenticated and to call the Shopify Admin API on your behalf.
• Receive, PO, and cost data — purchase orders, receive documents, accepted quantities, unit costs, cost lock history, related SKUs/titles/barcodes, and sync notes that the app creates or imports for receiving and cost locking.
• Billing state — which plan is active (Dock / Floor / Yard) and billing status, as returned by Shopify Billing.

We do not collect storefront customer checkout data, payment card numbers, or marketing lists through this app. The app runs in Shopify Admin for inventory receiving workflows.

How we use Shopify APIs

ReceiveKit uses the Shopify Admin API (GraphQL) with the scopes you approve at install. Typical uses include reading products and inventory, adjusting received quantities, updating inventory item cost, and working with inventory transfers/shipments where available.

Data stays scoped to the merchant shop that installed the app. We do not use Admin API access for unrelated shops or for advertising.

Why we store this data

• Authenticate the embedded app and keep your session working.
• Power receive → labels → cost-at-receipt features you use in Admin.
• Keep per-receipt cost history inside ReceiveKit (Shopify itself only keeps the latest unit cost write-back).
• Apply the Shopify Billing plan you choose.

Sharing and selling

We do not sell your shop data, receive history, or tokens. We do not share merchant data with third parties for their marketing.

Limited processors may touch infrastructure only (for example, a hosting provider or database host running the app). They are not sold your data for their own use. Shopify remains the platform where you manage the store; ReceiveKit only accesses what you authorize.

Retention and uninstall

While the app is installed, we retain shop domain, session/OAuth material, and receive/PO/cost records needed to operate the product.

When you uninstall the app, Shopify sends an uninstall webhook. ReceiveKit deletes session rows for that shop so OAuth tokens are no longer stored. Remaining app-owned receive/PO records may be removed or further redacted when Shopify’s mandatory compliance webhooks (including shop redact) require it for App Store distribution.

Security

Access tokens and app secrets are treated as sensitive. The app uses Shopify’s embedded session-token / OAuth patterns rather than asking staff for Shopify passwords. Hosting should use HTTPS in production.

Your choices

• Uninstall the app from Shopify Admin at any time.
• Email ecomsupport@akalonai.com for privacy questions, data access, or deletion requests related to ReceiveKit-stored data.
• Manage staff access and app permissions in Shopify Admin.

Children

ReceiveKit is a B2B merchant tool for Shopify Admin. It is not directed at children.

Changes

If this policy changes in a material way, we will update the “Last updated” date on this page. Continued use of the app after an update means you accept the revised policy.

Contact

Trevor Otterson
Email: ecomsupport@akalonai.com
Product: ReceiveKit / Receive Labels & Cost (Shopify embedded admin app)