Privacy Policy

Wishnest - Wishlist & Restock · Effective August 22, 2026

This Privacy Policy explains what data Wishnest - Wishlist & Restock (the "App") collects, why we collect it, and how we handle it. By installing the App on your Shopify store, you agree to the practices described below.

1. Information we collect

The App only collects data required to provide its core function: letting shoppers save products to a wishlist and emailing them when a saved product is back in stock.

• Store data: your store domain and the app session/access token issued by Shopify.
• Product data: product IDs, variant IDs, titles, images, prices, and inventory availability for products that shoppers save.
• Shopper data: when a shopper saves a product, we store the product they saved, and — where provided — their customer ID and email address so we can send back-in-stock notifications. Guests may provide an email address voluntarily to receive notifications.

We do not collect payment card data, passwords, or any special categories of personal data.

2. How we use the data

• To store and display each shopper's wishlist.
• To detect when a saved product returns to stock and send an automatic back-in-stock email to shoppers who saved it.
• To show the merchant an aggregated dashboard of the most-wishlisted products.

We never sell personal data, and we never use it for advertising or any purpose beyond the App's function.

3. How the data is stored and protected

Data is stored in a managed PostgreSQL database (Neon) and transmitted over encrypted TLS connections. Access is restricted to the App's backend. Each store's data is isolated and identified by its store domain.

4. Third-party services

We share the minimum data necessary with the following processors solely to operate the App:

• Shopify — platform, authentication, and webhooks.
• Neon — database hosting.
• Render — application hosting.
• Resend — delivery of back-in-stock notification emails (receives the recipient email address and message content).

5. Data retention and deletion

We retain data only as long as the App is installed and the data is needed for its function. We honor Shopify's mandatory compliance webhooks:

• customers/data_request — we provide the stored data for a given customer on request.
• customers/redact — we delete a specific customer's wishlist and email data.
• shop/redact — we delete all of a store's data 48 hours after the App is uninstalled.

6. Your rights

Shoppers and merchants may request access to, correction of, or deletion of their personal data at any time by contacting us at the address below. Merchants can also trigger deletion by uninstalling the App.

7. Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the latest version.

8. Contact

For any privacy question or data request, contact us at 7146142@qq.com.