Privacy Policy — BatchGuard: Expiry & Lots
Who we are. BatchGuard: Expiry & Lots ("the app") is operated by Matthew Schafer (operating as ARO PCRM), reachable at support@aro-pcrm.com.
What we collect. The app stores only: your shop domain, the app's session tokens, your app settings, the lot data you enter (product/variant IDs and titles, SKUs, lot codes, expiry dates, quantities, notes), a record of write-offs (units, unit cost, value, reason), and a log of actions the app performed. The app requests the read_products, write_products, read_inventory and write_inventory permissions. Inventory access is used to show your live available stock next to each lot and, only when you click "Write off" on a lot, to reduce that variant's available quantity — we never store your inventory numbers.
What we never collect. No customer names, emails, addresses, orders, payment data, or analytics identifiers. The app has no storefront component and sets no cookies for your shoppers.
How we use it. Solely to provide the features you configured: showing expiry status and live stock, sending your digest email to the address you chose, applying the tagging/unpublishing automations you enabled, and writing off lot quantities from available stock when you explicitly choose to. Nothing is sold, shared, or used for any other purpose.
Where it lives. On the app's server database. Digest emails are delivered via our email provider. Data is encrypted in transit (TLS).
Retention & deletion. Uninstalling the app stops all processing. When Shopify sends the shop/redact webhook (48 hours after uninstall), every record for your shop is permanently deleted. You can also email us for immediate deletion.
Product tags. If you turned on tagging, the tags the app added to your products (by default expiring-soon and expired-lot) stay on those products after uninstall, because Shopify removes the app's access at that moment. Before uninstalling, open Settings and click Remove all tags this app added. Products the app set to Draft stay in Draft until you publish them.
If you uninstall. We send one email to the store owner's address asking why you left, with one-click answers. We keep that address only until you answer or until Shopify's shop/redact notice arrives (48 hours after uninstall), whichever comes first; the answer itself is kept without your shop or address. Reply to that email or write to us to have the address deleted sooner.
GDPR/CCPA webhooks. customers/data_request and customers/redact are acknowledged automatically; since the app stores no customer data, there is nothing to return or erase. shop/redact triggers full deletion as above.
Changes. We'll update this page and the effective date if practices change.