Reorder CSV · Updated 19 October 2026
Data and privacy.
A small inventory-planning tool should keep a small amount of data. These are the current application practices and their limits.
Who operates the app
Administrative Burden Ltd, a UK company (17363389), operates Reorder CSV. Contact hello@modestambitions.studio for privacy questions, access, correction or deletion requests. Merchants remain responsible for how they use their customers’ store records.
This is a development preview restricted to the permitted development store. It has not launched in the Shopify App Store.
What the worksheet reads
The app reads store identity and timezone, product variants, inventory and locations, and recent order dates, variant identifiers and current quantities. It uses these inputs to calculate a recent-sales planning worksheet and its CSV. Orders can contain protected data even though this app does not request customer names, emails or addresses.
Shopify authentication and read permissions are required. The app does not write inventory or orders.
What is retained
Encrypted offline credentials, installation state and merchant-supplied planning settings are kept while installed. Only the latest complete report is retained, for up to seven days. Minimal order-to-variant quantity contributions expire 35 days after the order’s creation.
Privacy-request records contain request identifiers, relevant order identifiers and fulfilment status, retained for up to 35 days from the request. Customer names, emails, addresses and raw Shopify response bodies are not retained in these application records.
Experiment measurement
A separate ledger records installation, successful worksheet completion, CSV download, verified entitlement and uninstall events. It uses keyed pseudonymous shop identifiers and expires events after 180 days. The ledger does not store email addresses, IP addresses, raw URLs or Shopify tokens.
Development and founder tests are excluded from commercial reports. An entitlement, trial or installation is not evidence of collected payment. No third-party advertising tracker is added by these public pages.
Deletion and uninstall
The installed app’s privacy screen lets a merchant erase its operational app data and sessions. Uninstall stops processing and deletes operational app data. Signed Shopify privacy requests remove relevant retained inputs and invalidate affected reports. Shop erasure also removes pseudonymous experiment events.
Deleting app data does not itself cancel a Shopify subscription. Use Shopify’s subscription controls. A later authenticated reinstallation may create new app records.
Backups and deletion records
Separate deletion ledgers keep keyed erasure identifiers and epochs so an older database backup cannot silently revive erased records. These records must be preserved while older backups could be restored; they do not use the report’s seven-day retention period.
Application retention does not set the retention of infrastructure logs, email correspondence or backups. Hosting and operational retention must be reviewed before a merchant launch. Rolling back both data and its deletion ledger would defeat the application’s restore protection.
Providers and support messages
Shopify provides the commerce platform, authentication and permitted app billing when configured. Hosting providers process traffic needed to serve the app. Sending support email shares the information you choose to include with our email service. Do not send passwords, tokens, customer records or unredacted order exports.
No customer data is sold or used by this application to create advertising audiences. Contact us for the current hosting and operational details before providing production data.
Customer data requests
A successful webhook acknowledgement is not fulfilment of a customer access request. The installed privacy screen exposes minimal retained request data and tracks the merchant’s explicit fulfilment acknowledgement. The app does not contact customers on the merchant’s behalf.
For a request about this app, email the contact above with your store domain and request. We will verify the requester before disclosing or deleting data. See support for safe diagnostic information.