Privacy Policy

Account information. When you create a workspace or accept an invitation we store your name and email address, and authentication records needed to sign you in. Workspaces are invite-only.

Store data you connect.When you connect your Shopify store, we access only what the integration needs: your product catalog (titles, variants, SKUs, barcodes, prices, and images), inventory levels, and order records limited to order identifiers, timestamps, order status, and line items (variant, SKU, and quantity). We do not request, receive, or store your customers' names, email addresses, shipping addresses, or payment details. The same applies to an Etsy connection, where we read receipt line items (SKU and quantity) only.

Other integrations you choose. Rainier Ops can connect to additional services at your direction (for example email, payments, shipping, or search analytics providers). Each connection accesses only the data needed for the feature you enabled, and you can disconnect any integration at any time in Settings.

Credentials. API keys and OAuth tokens for services you connect are encrypted at rest with AES-256-GCM.

Data you enter. The operational records you create in the product: purchase orders, sales orders, stock counts, organizations, contacts, and similar business data.

We use this data to run the product for you: deriving inventory positions, forecasting demand, planning reorders, and managing orders. We do not use your data for advertising, we do not sell or rent it to anyone, and we do not use it to train machine learning models.

Optional AI-assisted features send the specific content you ask to be processed (for example a draft or a document you upload) to an AI provider such as Anthropic or OpenAI, using API credentials you supply, solely to produce the output you requested.

We share data only with the service providers that host and operate the product: our application and database hosting provider (Railway) and file storage provider (Amazon Web Services), each processing data on our behalf. Beyond that, we disclose data only if required by law.

We retain your data while your workspace is active. If you uninstall the Shopify app, we honor Shopify's data-erasure requests: when Shopify sends its shop-redaction request 48 hours after uninstall, we delete the store connection and the cached catalog for that shop. Because we never store end-customer personal information, customer data requests and customer redaction requests have nothing to return or erase, and we acknowledge them accordingly.

You can also request deletion of your workspace and all of its data at any time using the contact below, and we will complete it within 30 days.

Data is encrypted in transit with TLS and stored in access-controlled infrastructure in the United States. Stored credentials are encrypted at rest. Access to production systems is limited to the people who operate the service.

We use cookies only to keep you signed in and to protect authentication flows. We do not use advertising or cross-site tracking cookies.

You can access, correct, export, or delete your data. Most of it is directly viewable and editable in the product; for anything else, contact us and we will respond within 30 days. If you are in a jurisdiction with specific data protection rights (such as the GDPR or CCPA), those rights apply to how we handle your data, and we will honor requests to exercise them.

If we make material changes we will update this page and note the new effective date above. Continued use of the product after a change means the updated policy applies.

Questions or requests: [email protected]