Privacy policy
Last Updated: September 4, 2026
Protecting your privacy is important to us. This Privacy Policy explains how Artos Software Inc. ("we," "us," "our"), a Delaware corporation located at 1111B S Governors Ave STE 3617, Dover, DE 19904, USA, collects, uses, shares, and protects personal information in connection with STOQ, a preorder and back-in-stock notification app for Shopify stores.
This policy covers two groups of people:
- Merchants who install and use STOQ to run their Shopify store, and
- Shoppers ("Signups") who submit their contact information through a merchant's storefront to request a back-in-stock notification or place a preorder.
If you're a shopper with a question about your data, please contact the merchant's store directly in the first instance — as explained below, we act as a data processor on the merchant's behalf.
1. Information We Collect
From Merchants: STOQ connects to your store through Shopify's own account and permission system — we don't create a separate STOQ username or password for you. Through this connection, we access store and account information Shopify provides (such as your store name, contact email, and relevant store/product data) as needed to provide the Service.
From Shoppers: When a shopper submits a back-in-stock notification request or preorder on a merchant's storefront, we collect the information they provide — typically their name, email address, and/or phone number.
Usage Data: We may collect information about how STOQ is used — for example, actions taken within the app, notification delivery and engagement data, and similar operational data.
Children: STOQ is not directed at children. Shoppers submitting a back-in-stock request or preorder must meet the age requirements of the merchant's own store.
Website Visitors: stoqapp.com uses Google Analytics to understand site traffic. This may involve cookies or similar technologies that collect information about your visit (e.g., pages viewed, general location, device/browser type). This is separate from the STOQ app itself and does not involve merchant or shopper data collected through the app.
2. How We Use Information, and Our Legal Basis for Doing So
We use the information described above to:
- Provide and maintain the Service — sending preorder confirmations and back-in-stock notifications (legal basis: performance of a contract with the merchant, and the shopper's consent to be notified)
- Monitor for compliance with our Terms of Service (legitimate interest)
- Communicate service updates and notifications (performance of a contract, legitimate interest)
- Secure accounts and the Service (legitimate interest, legal obligation)
- Improve STOQ's functionality (legitimate interest)
- Prevent fraudulent or illegal activity (legitimate interest, legal obligation)
- Meet legal obligations (legal obligation)
- (Website visitors only) understand and improve stoqapp.com through aggregate traffic analytics (consent, where required by your location)
If you're located in the EEA, UK, or another jurisdiction that requires us to state a legal basis for processing, the bases above apply to the corresponding use of your information. Where we rely on consent, you can withdraw it at any time as described in Section 6.
3. How We Share Information
We share information only in these circumstances:
- With your explicit consent
- With third-party service providers who help us deliver the Service (see our published Subprocessors list) — each is contractually required to protect the data and use it only to provide their service to us
- When required by law, or to protect our rights or the safety of others
- In connection with a merger, acquisition, or sale of assets, subject to the same protections described here
We do not sell personal information, and we do not share shopper or merchant data for cross-context behavioral advertising.
4. Data Security
We maintain technical and organizational measures designed to protect personal information, including encryption in transit and at rest, role-based access controls, and multi-factor authentication on critical systems. A full description of our security measures is set out in Appendix 2 of our Data Processing Agreement.
5. Data Retention
We retain personal information for as long as a merchant's store remains connected to STOQ. When a merchant uninstalls STOQ, all personal information associated with that store — including shopper contact details and merchant account/store data — is deleted within 48 hours, consistent with Shopify's mandatory data-redaction requirements for apps.
The only thing that continues beyond that point is aggregated, anonymized usage data in our analytics tools (see Section 1) — this data cannot be tied back to any individual person or store and is not personal information.
You may request deletion sooner by contacting support@stoqapp.com.
6. Your Rights
Depending on your location, you may have rights under applicable data protection law (such as the GDPR or CCPA), including the right to:
- Access, correct, or update your personal information
- Request deletion of your personal information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Receive a copy of your data in a portable format
If you're a shopper: because we act as a data processor on behalf of the merchant whose store you interacted with, we ask that you first direct requests to that merchant. We'll assist the merchant in fulfilling your request as described in our Data Processing Agreement.
If you're a merchant: contact us directly at support@stoqapp.com.
We also provide reasonable, technically feasible assistance with data protection impact assessments (DPIAs) upon written request — see our Data Processing Agreement for details.
Right to complain: if you're in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe we haven't handled your personal information properly. We'd appreciate the chance to address your concern directly first — contact us at support@stoqapp.com.
7. Your California Privacy Rights
If you're a California resident, the CCPA (as amended by the CPRA) gives you specific rights in addition to those in Section 6, including the right to know what personal information we collect and why, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, so there's nothing to opt out of today. If that changes, we'll update this section and provide a way to opt out. To exercise any California privacy right, contact support@stoqapp.com.
8. Links to Other Websites and Applications
STOQ and stoqapp.com may link to third-party websites or services. We aren't responsible for the privacy practices or content of those third parties.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or by posting a notice on our website.
10. Acceptance of This Privacy Policy
By using STOQ or stoqapp.com, you agree to the terms of this Privacy Policy.
11. Contact Us
Questions or concerns about this Privacy Policy can be sent to support@stoqapp.com.