Privacy Policy

Outranked is a Shopify app that automatically sorts out-of-stock products to the bottom of your collections. This policy explains what data we access, store, and share to provide this service.

When you install Outranked, we store the following in our database:

• Store domain — your myshopify.com address, used to identify your account.
• Session credentials — OAuth access tokens provided by Shopify to make API calls on your behalf. These include your merchant name, email, and user ID as part of the standard Shopify session.
• App settings — your sorting preferences (frequency, collection mode, excluded tags, notification toggles).
• Sort history — a log of each sort run including timestamp, status, trigger source, and a summary of how many collections were processed. Product-level data is not stored.
• Notification email — if you enable email notifications, we store the email address you provide.
• Slack webhook URL — if you enable Slack notifications, we store the webhook URL you provide.
• Per-collection settings — collection IDs, titles, and whether sorting is enabled or paused for each.
• Subscription tier — your current plan (Starter, Essential, Premium, or Ultimate) synced from Shopify billing.

Outranked reads the following from Shopify in real time to perform sorting. This data is processed in memory and never saved to our database:

• Product titles, tags, and variant availability status
• Collection titles, sort order, and product positions
• Inventory levels (in-stock vs. out-of-stock)

• Customer personal data (names, emails, addresses, orders, payment info)
• Storefront visitor analytics or browsing behavior
• Tracking cookies or device identifiers
• Product pricing or financial data

• Sorting — reading product availability to reorder out-of-stock items to the bottom of collections.
• Scheduling — using your frequency setting to trigger automatic sorts at the right interval.
• Notifications — sending sort results to your email or Slack channel (only if enabled by you).
• Analytics — displaying sort history, success rates, and collection statistics within the app dashboard.
• Billing — checking your Shopify subscription to determine feature access.

We use the following services to operate Outranked. Data shared with each is listed below:

• Resend (email delivery) — receives your notification email address, store domain, collection names, and sort statistics when sending notification emails. Resend Privacy Policy.
• Slack (webhook notifications) — receives collection names, sort statistics, and a dashboard link when you enable Slack notifications. Data is sent to the webhook URL you configure.
• Upstash QStash (job scheduling) — receives your store domain and trigger source to schedule background sort jobs. No product or customer data is transmitted. Upstash Privacy Policy.
• Neon (database hosting) — our PostgreSQL database is hosted on Neon with SSL encryption. All stored data resides here. Neon Privacy Policy.

• All data is stored in a PostgreSQL database with SSL/TLS encrypted connections.
• API credentials and secrets are stored as environment variables, never in source code.
• All communication between our servers and third-party services uses HTTPS.
• QStash webhook requests are verified using cryptographic signatures.
• Shopify webhook requests are verified using HMAC signatures.

When you uninstall Outranked, your sessions are deleted immediately. Within 48 hours, Shopify sends a mandatory shop/redact webhook, at which point we permanently delete all remaining data: settings, sort history, collection settings, and notification preferences.

You can also export your sort history as CSV from the Analytics page before uninstalling.

Outranked requests the following permissions:

• write_products — to reorder products within collections (move out-of-stock items to the bottom).
• read_inventory — to check which product variants are out of stock.

We do not request access to customer data, orders, or any other Shopify resources.

Outranked does not collect or process end-customer personal data. We handle all three mandatory Shopify compliance webhooks (customers/data_request, customers/redact, shop/redact) to ensure full compliance.

We may update this policy as the app evolves. Material changes will be communicated through the app dashboard.

For privacy questions or data requests, contact us at onurhandtr@gmail.com.