SafeStock eBay Oversell Alert — Privacy Policy

Effective 17 August 2026

SafeStock eBay Oversell Alert is an app operated by Sognora. It is an independent oversell check for merchants who sell the same stock on their store and on eBay: every hour it compares the quantity eBay is showing buyers against the store's true available stock, and alerts you when eBay is about to sell an item the store can no longer ship. It never changes a quantity on either side. This policy describes what the app stores about your shop and about the eBay listings it watches, and what it deliberately does not store.

For the shop data described below, Sognora acts as your service provider and processes it on your instructions to operate the app.

1. What the app stores

• Shop and installation. Your myshopify.com domain, whether the app is currently installed, and the time and result of the most recent scan (including an error summary when a scan failed).
• Staff session. The session record defined by the platform's session storage contract, which holds the access token issued to this app and the limited staff fields supplied with it.
• Your eBay connection. The OAuth refresh token you grant when you connect eBay, stored encrypted at rest, and used only to read your own active listings so the two sides can be compared.
• Comparison results. For each scan: per-SKU rows holding the SKU, the available quantity eBay is showing (its listing quantity minus quantity already sold), the matching store SKU's available stock, the resulting verdict, and the time of the check. These are your own product identifiers and stock numbers — not buyer records.
• Alert settings. The email address you enter to receive alerts, whether alerts are switched on, and the delivery state of the alerts already sent.

2. What the app deliberately does not store

• No customer data at all. The app requests no order and no customer access, so it never receives buyer names, email addresses, phone numbers, or shipping or billing addresses from your store. There is no protected customer data in the app because none is ever requested.
• No eBay buyer data. On the eBay side the app reads only your own active listings — their title, SKU and quantities. It does not read your eBay orders, messages or buyers.
• No payment details. The subscription is billed by the platform; the app never receives card information.

3. Permissions the app requests

The app requests 3 read-only access scopes and no others:

• read_products
• read_inventory
• read_locations

These scopes are used to read your catalog, your inventory levels and your locations, so the app can find the true available quantity for each SKU and compare it against what eBay is showing. Every one is read-only: the app never creates, edits or deletes a product, an inventory level or a listing on either your store or eBay. It reports; you decide what to do.

4. Alert emails

When a scan finds that an eBay listing can sell more than the store has available, the app emails the address you configured, from shin@sognoragroup.com. Delivery is handled by Resend, acting as our email processor. The message names the SKU, the two quantities that disagree and the time of the check — never a buyer or an order, because the app does not hold either.

5. Retention and deletion

• Data is kept while the app is installed, so your connection and your recent scan results remain available to you.
• On uninstall, scanning and alerts stop immediately and the session is removed. The platform sends its shop/redact request 48 hours later, and that request deletes everything the app holds for your shop: the encrypted eBay token, all comparison results, alert settings, install record and sessions.
• A customers/redact request and a customers/data_request are both answered by confirming the app holds no customer data for the person named — because, as described in section 2, it never collects any.

6. Sub-processors and disclosure

• Shopify — the platform the app runs on and reads the store side from.
• eBay — read, with your consent, for your own active listings only.
• Fly.io — application hosting.
• Supabase — the PostgreSQL database.
• Resend — delivery of the alert emails described above.

Shop data is not sold, is not used for advertising, and is not used to train machine-learning models. It may also be disclosed where the law requires it, or to protect the service and its users.

7. Security and location

Data is encrypted in transit over HTTPS, and your eBay refresh token is additionally encrypted at rest. This app's data lives in its own PostgreSQL schema, reached by a database role that has no access to any neighbouring app's data. Credentials are held as deployment secrets and are kept out of application code. The application is operated from the United States, so data may be transferred there from your country.

8. Your choices and requests

You can switch alerts off or change the alert address at any time, disconnect eBay, or uninstall the app — which starts the deletion described in section 5. You may also ask us to access, correct or delete your data, or object to a particular use of it, and you may complain to the data protection authority in your country. We will confirm that a requester is authorised for the shop before acting.

9. Changes and contact

Material changes will be posted on this page with a new effective date. Privacy questions and requests go to shin@sognoragroup.com. Never include an API key, password or access token in a message to us.

Privacy · Terms · Support