Numana Works — Privacy Policy

Effective June 10, 2026

Numana Works is an operations and bookkeeping app for Shopify merchants, built by Numana Consulting. This policy explains what data we access, how we use it, and how we protect it. We act as a data processor on behalf of the merchant (the data controller) who installs the app.

What we access

Through the Shopify APIs, with the merchant's authorization, we access:

• Products, variants, inventory levels and locations.
• Order financial data — order totals, subtotal, tax, currency, status, timestamps, and line-item quantities, SKUs and prices.

We deliberately do not request, process, or store customers' personal fields — no customer name, email, phone number, or shipping/billing address. Our order query is limited to financial and line-item fields.

How we use it

We use this data solely to provide the app's features to the merchant: recording purchases and inventory, keeping inventory quantities and true unit costs accurate, and forecasting what to reorder from the merchant's own sales. We do not sell data, and we do not use it for advertising, profiling, or automated decision-making.

What we store

We store the merchant's operational and accounting records — inventory, suppliers, purchase orders, received quantities, costs, bills, payments and ledger entries — along with the order financial data above. These records contain no customer personal information.

Security

All data is encrypted in transit (HTTPS/TLS) and at rest. Access to production systems is restricted and access-controlled.

Subprocessors

We host the application and database with Railway. We do not share merchant data with any other third parties.

Retention and deletion

Order financial and accounting records are retained for the merchant's accounting and audit needs (for example, the Canada Revenue Agency requires six years), after which they can be deleted on request. When a merchant uninstalls the app, we honor Shopify's mandatory data-deletion webhooks (shop/redact, customers/redact, customers/data_request); because we hold no customer personal information, customer-redaction requests are acknowledged as a no-op, and shop data is removed.

Your rights

Merchants may request access to, correction of, or deletion of their data at any time by contacting us. We respond to data requests forwarded through Shopify's compliance webhooks.

Changes to this policy

We may update this policy as the app evolves. The effective date above reflects the latest version.

Contact

Questions about this policy or your data: support@numanaconsulting.ca.