Privacy Policy

This Privacy Policy explains how Forthcast handles personal and store data when a merchant installs or uses the Shopify app and any optional connection.

1. Information We Collect

We collect the information needed for the product or service you use.

• Account and business-contact information, including names, email addresses, store identifiers, and authorised-user details.
• Shopify product, variant, inventory, location, order, sales, supplier or vendor, fulfilment, and purchase-order data needed for the app's planning workflows.
• Information supplied through optional connections that a merchant chooses to enable, together with the connection status and credentials or tokens needed to operate it.
• Support communications and technical or usage data such as IP address, browser, device, requested pages, and cookie choices.

2. How We Use Information

We use this information to authenticate the store, provide forecasts and inventory-planning workflows, generate merchant-reviewed draft purchase orders, operate enabled connections, provide support, secure and improve the service, and comply with legal obligations.

3. When We Share Information

We share data with Shopify, service providers needed to host, secure, and support the app, and providers for optional connections the merchant enables. We may also disclose information when required by law. We do not sell personal information or merchant store data.

4. Aggregated and De-identified Data

We may combine operational data across stores into aggregated, de-identified statistics for benchmarking, service improvement, research, reports, and documentation. Published statistics do not identify an individual store, product, customer, or order, and development and test stores are excluded before aggregation.

5. Optional Plaid Connection

Where a user chooses to connect a bank account through Plaid, Forthcast receives account identifiers, balances, and transaction history for cash-flow analysis and demand-forecasting features. Raw Plaid financial data is scheduled for deletion within seven days of retrieval or disconnection, whichever is sooner. Plaid also processes connection data under its own privacy terms.

6. Data Retention

We retain information for as long as needed to provide the requested service and meet security, fraud-prevention, accounting, dispute, and legal obligations. When information is no longer required, we delete or de-identify it.

7. Security

We use administrative, technical, and organisational safeguards designed to protect information. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal data, or to object to certain processing. We may need to verify your identity before acting.

9. Contact

Questions, privacy requests, or deletion requests can be sent to info@forthcast.io.