Privacy Policy

1. Who we are

PO Bridge is operated by Maru Labs. In this policy, “we,” “us,” and “our” refer to Maru Labs, and “the app” refers to PO Bridge.

2. Information the app processes

The app processes only the information needed to provide its service:

• Shopify shop and session information needed to authenticate the merchant and keep the app securely connected.
• Product, inventory, location, and inventory transfer information requested from Shopify when a merchant views or exports a transfer.
• Supplier template settings created by the merchant, including custom column names, column order, delimiters, and encoding preferences.
• Basic technical logs needed to operate, secure, and troubleshoot the service.

PO Bridge does not request customer or order data. Inventory transfer rows and generated CSV files are processed on demand and are not stored by PO Bridge after the response is delivered.

3. How we use information

• Authenticate the merchant and provide the app.
• Display Shopify inventory transfers.
• Save and apply supplier-specific export templates.
• Generate downloadable CSV files at the merchant’s request.
• Protect the service and diagnose technical problems.
• Comply with legal and Shopify platform requirements.

4. Service providers and disclosures

We use Shopify to provide store data and authentication, Vercel to host the app, and Neon to host the app database. These providers process information only as needed to provide their services to us. We do not sell merchant or customer information, and we do not use it for advertising.

We may disclose information if required by law, to protect the security or rights of merchants and the service, or as part of a business transfer subject to appropriate confidentiality obligations.

5. Retention and deletion

Supplier templates and Shopify session records are retained while the app is installed. When PO Bridge is uninstalled, the app deletes the shop’s saved templates and session records. Shopify’s mandatory privacy webhooks are also handled to ensure deletion requests are completed. Limited security logs may be retained for a reasonable period where necessary to prevent abuse, resolve incidents, or meet legal duties.

6. Security and international processing

We use reasonable administrative and technical safeguards designed to protect information, including Shopify-authenticated access and secure HTTPS connections. Our providers may process information in countries other than the merchant’s country, subject to their data protection commitments.

7. Merchant choices and rights

Merchants can edit supplier templates in the app and can stop all further processing by uninstalling PO Bridge. Depending on local law, a merchant may also request access, correction, deletion, or other rights relating to their personal information.

8. Changes to this policy

We may update this policy when the app or legal requirements change. We will post the updated version here and revise the effective date.

9. Contact

For privacy questions or requests, email Maru Labs at merotic01@gmail.com.