Live SupplyPrivacy policy
This policy explains what information Live Supply ("the app", "we") collects, how it is used, and the choices you have. The app is provided by Barter Agencies, Gold Coast, Queensland, Australia. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Who this covers
The app is used by Shopify merchants ("you"). In running your store's orders it also processes information about your customers. You remain responsible for your relationship with your customers; we process their information only to provide the app's features to you.
Information we collect
From Shopify
- Your store's domain and the access token Shopify issues when you install the app.
- Orders: order number, dates, fulfilment and payment status, line items (product, variant, SKU, quantity, vendor).
- Customer details attached to those orders: first name, last name and email address.
- Product titles, variants and SKUs, used to recognise bundles.
Information you enter
- Stock counts, inbound stock, supplier lead times and other settings.
- Manual order statuses, notes and supplier references.
- Your email signature, and the text of any order update email you write in the app.
From Google, if you connect Gmail
- The email address of the Google account you connect.
- OAuth access and refresh tokens that let the app send email on your behalf.
We do not collect payment card details, customer addresses or phone numbers.
How we use it
- To show your open orders with a status and expected dispatch date for each line.
- To calculate stock levels and reorder suggestions from your sales history.
- To write order update emails for you to review, and to send them when you choose to.
- To keep a log of which customers you have emailed and when, so you can see it in the app.
We do not sell any information, use it for advertising, or contact your customers ourselves.
Google user data
The app requests a single Gmail permission, https://www.googleapis.com/auth/gmail.send, plus your basic Google account email address. It uses them only to send the order update emails that you write or review in the app and confirm by pressing Send. Each send is a direct action by you.
- The app cannot read, search, modify, label or delete any email in your mailbox.
- Your Google tokens are encrypted before they are stored in our hosted database, travel only over encrypted connections, and are used only to send the emails you approve.
- Google user data is not shared with or transferred to anyone else, and is not used for advertising or to train AI or machine-learning models.
- No person at Barter Agencies reads your Google data, except with your explicit permission for support, for security purposes, or where required by law.
- When you disconnect Gmail in the app's Settings, or uninstall the app, we ask Google to revoke the access and delete the stored tokens and connected email address immediately. You can also revoke access at any time at myaccount.google.com/permissions.
Live Supply's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
We use a small number of providers to run the app. Each only receives what it needs to do its job:
- Shopify: the platform the app runs on and the source of your order and product data.
- Render (hosting) and Prisma (managed Postgres database): store and serve the app and its data. Servers may be located outside Australia, including in Singapore and the United States.
- Google: sends the emails you approve, from your Gmail account.
- Anthropic: if the AI email writer is switched on, the order details needed to write an update (customer first name, order number, product names, statuses and dates) are sent to Anthropic's API to draft the email text. Anthropic does not use API data to train its models. No Google user data is sent to Anthropic.
How long we keep it
Order and stock information is kept while the app is installed, so the app can show history and forecasts. If you uninstall the app, your store's session is removed and Gmail access is revoked straight away. Shopify then tells us to erase the store's data 48 hours later, and we delete all of it automatically. If you reinstall within that time, your data is kept. Gmail tokens are deleted as soon as you disconnect Gmail. When a customer asks Shopify to erase their information, we remove their name and email from the order copies we hold.
Security
All traffic uses HTTPS. The app is only reachable through your authenticated Shopify admin, and each store can only see its own data. Gmail tokens are encrypted before they are stored, and our database and its backups are encrypted at rest by our hosting provider. We log which staff account views or emails customer information, without storing the information itself in the log. Access to our hosting and database is limited to the people who maintain the app.
Your choices and requests
You can disconnect Gmail or uninstall the app at any time. You, or a customer of yours, can ask us for a copy of the information we hold, ask us to correct it, or ask us to delete it, by emailing support@livesupplyapp.com. If you are not happy with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
Changes
If we change this policy we will update the date at the top of this page, and tell you in the app if the change is significant.
Contact
Barter Agencies, Gold Coast, Queensland, Australia
support@livesupplyapp.com