Privacy policy

Last updated: September 1, 2026

PO Simple is operated by Lumatra Technology. This policy explains the information the app processes when a Shopify merchant installs and uses PO Simple.

Information we process

We process the merchant shop domain and Shopify authentication data; product, variant, and inventory information needed for stock rules; supplier business contact and address information entered by the merchant; purchase orders, PDF documents, settings, automation rules, and operational history created in the app; and limited diagnostic logs needed to maintain security and reliability.

PO Simple does not request access to Shopify customer, order, checkout, or payment information.

How we use information

We use this information only to provide the app: displaying Shopify catalog and inventory data, evaluating merchant-defined low-stock rules, preparing purchase orders, generating PDFs, sending purchase order emails when the merchant asks us to, updating Shopify inventory when the merchant confirms received quantities, providing support, and protecting and improving the service.

Service providers and disclosure

We use Shopify for commerce platform access, Render for application hosting and database services, Resend for merchant-initiated purchase order email delivery, and GitHub for source hosting and deployment automation. These providers process information only as needed to deliver their services. We do not sell merchant data or use it for unrelated advertising.

Retention and deletion

Active installation data is retained while needed to provide PO Simple. When Shopify sends the mandatory shop-redaction request after uninstall, we delete the shop's application data in accordance with Shopify's required timeline. Residual encrypted backups age out on the hosting provider's normal rotation.

Security and international processing

We use access controls, encrypted transport, signed Shopify requests, and tenant isolation to protect information. Service providers may process information in the United States and other locations where they operate, subject to their contractual safeguards.

Your choices and contact

Merchants can update or delete supplier and purchase-order records in the app, uninstall PO Simple, or contact us with privacy and deletion requests at support@lumatra.io.