Privacy Policy — ExpiryPilot
1. Who this policy covers
ExpiryPilot is a business application installed by merchants on BigCommerce, Shopify, Ecwid, and Wix stores. This policy explains what data the app processes, why, and what happens to it. There are two kinds of people whose data the app touches:
- Merchants — the store owners and staff who install and use the app.
- Store customers — people who bought from a merchant’s store. The app sees limited customer information only as part of the merchant’s order records, and only for the recall purpose described below.
2. What we process
Merchant / store data
- Store identity and connection credentials: the platform’s store identifier and the access tokens issued when the merchant installs the app. Tokens are stored encrypted at rest.
- Catalog and inventory data: products, variants, SKUs, prices, stock levels, and (on platforms that support them) locations.
- Batch records the merchant creates or imports: lot codes, quantities, expiry dates, unit costs, and the markdown rules and price-change ledger the app keeps.
Order and customer data (limited, purpose-bound)
- Order records needed to track which batch each order drew from: order identifiers, line items, quantities, and fulfillment location.
- Customer name and email address only as included in those order records, so that — if a batch must be recalled — the merchant can identify and contact the customers who received it.
We do not collect payment card data. We do not operate a consumer-facing service, and we do not build profiles of store customers.
3. How data is used
- To provide the app’s features: batch/expiry tracking, FEFO rotation, expiry alerts, markdown proposals and their ledger, spreadsheet import, clearance-listing drafts, and recall reports.
- Customer data is used only to generate the merchant’s recall materials (the affected-customer list and a recall email draft) at the merchant’s direction. The recall email is sent by the merchant, from the merchant’s own address — we do not send marketing or recall email to store customers ourselves.
- We never sell personal data. We never use merchant or customer data for advertising, and we never combine data across stores.
4. Sharing
We share data only with the service providers required to run the app (hosting and infrastructure), under contract, for that purpose alone: Vercel Inc. — application hosting and infrastructure (United States). We may disclose data if required by law. If ModelProof Technologies is ever sold or merged, data handling under this policy continues unless a successor policy is published with notice to merchants.
5. Retention and deletion
- Store data is kept while the app is installed and the merchant’s subscription is active.
- On uninstall, we delete the store’s data — including batch records, order-allocation records, and any customer data held with them — within 30 days, except records we must retain for legal or accounting reasons (e.g., billing records), which are kept no longer than required.
- A merchant may request earlier deletion, or an export of their data, at any time via contact@modelproof.ai.
6. Rights of store customers
Customer data in the app belongs to the merchant’s store records; the merchant is the controller of that data and we act as its processor. If you bought from a store that uses ExpiryPilot and want to exercise your privacy rights (access, correction, or deletion of your personal data), please contact that store first — it controls your data. You may also contact us at contact@modelproof.ai and we will pass your request to the merchant and delete any data we hold for that store in accordance with Section 5.
7. Changes to this policy
We may update this policy as the app develops. Material changes will be posted on this page with a new effective date, and notice will be given to installed merchants.
8. Contact
ModelProof Technologies, San Ramon, California, USA — contact@modelproof.ai