Privacy Policy

10x With Me Inc. ("we," "our," "us," or "Company"), operating as Restock Ops AI, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory management SaaS platform, including when you connect your Shopify or WooCommerce stores.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

1. Information We Collect

1.1 Information Collected Through Shopify APIs

When you connect your Shopify store to Restock Ops AI, we collect the following data through Shopify's APIs:

• Product Data - Product names, SKUs, descriptions, variants, and inventory levels (via read_products scope)
• Order Data - Order history, order dates, quantities sold, and revenue data for sales velocity calculations (via read_orders scope)
• Inventory Data - Current stock levels, inventory locations, and stock movements (via read_inventory scope)
• Location Data - Warehouse and fulfillment center addresses for purchase order generation (via read_locations scope)
• Product Listings - Product listing information (via read_product_listings scope, optional)

Important: We do not collect any information directly from your customers (end shoppers). We only access merchant data through Shopify's APIs with your explicit authorization.

1.2 Information You Provide Directly

When you create an account or use our service, you may provide:

• Account Information - Email address, display name, password (encrypted)
• Organization Information - Organization name, settings, and preferences
• Supplier Data - Supplier names, contact information, lead times, payment terms, and minimum order values
• Purchase Orders - Purchase order data, freight information, and supplier relationships
• User Preferences - Notification preferences, dashboard settings, and customizations

1.3 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data - How you interact with our platform, features used, and time spent
• Device Information - Browser type, device type, operating system, and IP address
• Log Data - Server logs, error reports, and performance metrics
• Cookies and Tracking - We use cookies and similar technologies to maintain your session and improve our service

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery - To provide, maintain, and improve our inventory management platform, including AI-powered demand forecasting, restocking recommendations, and purchase order generation
• Analytics and Insights - To calculate sales velocity, identify bestsellers, analyze inventory risk, and generate business intelligence reports
• Account Management - To create and manage your account, process subscriptions, and communicate with you about your account
• Notifications - To send you stock alerts, purchase order notifications, daily/weekly insights, and other service-related communications
• Security and Fraud Prevention - To detect, prevent, and address security issues, fraud, and unauthorized access
• Legal Compliance - To comply with legal obligations, respond to legal requests, and protect our rights and the rights of our users
• Service Improvement - To analyze usage patterns, improve our algorithms, and develop new features
• Support and Troubleshooting - Our support team may access your account data to provide support and troubleshoot issues on your behalf

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

3.1 Third-Party Service Providers

We use trusted third-party services to operate our platform:

• Firebase (Google) - For authentication, database storage, and hosting services
• Shopify - To access your store data through their APIs (with your authorization)
• WooCommerce - To access your WooCommerce store data (if connected)
• Xero - For accounting integration (if you choose to connect your Xero account)
• Payment Processors - For processing subscription payments (Klarna, Rapyd, Clearhaus, QuickPay - if applicable)
• Email Services - For sending transactional emails and notifications
• AI/ML Services - For demand forecasting and AI-powered recommendations (we may use services like OpenAI or Anthropic, but your raw data is not used to train their models)

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to:

• Comply with legal processes or government requests
• Enforce our Terms of Service
• Protect our rights, privacy, safety, or property
• Protect the rights, privacy, safety, or property of our users or others

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control.

4. Data Storage and Security

Data Location: Your data is stored and processed on servers located in the United States. If you are located outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

Security Measures: We implement industry-standard security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Firebase's enterprise-grade security infrastructure
• Role-based access control within your organization

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our services. Specifically:

• Active Accounts: We retain all data while your account is active
• Deleted Accounts: Upon account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes
• Legal Requirements: We may retain certain information for longer periods if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights (All Users)

• Access - Request a copy of the personal information we hold about you
• Correction - Request correction of inaccurate or incomplete information
• Deletion - Request deletion of your personal information (subject to legal requirements)
• Account Deletion - Delete your account and all associated data through your account settings
• Data Export - Request an export of your data in a machine-readable format

6.2 GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Object - Object to processing of your personal information
• Right to Restriction - Request restriction of processing
• Right to Portability - Receive your data in a structured, commonly used format
• Right to Withdraw Consent - Withdraw consent where processing is based on consent
• Right to Lodge a Complaint - File a complaint with your local data protection authority

Note: While we are not established in the European Union, we provide GDPR-compliant privacy rights to all users regardless of location.

6.3 CCPA/CPRA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know - Know what personal information we collect, use, and disclose
• Right to Delete - Request deletion of your personal information
• Right to Opt-Out - Opt-out of the sale of personal information (we do not sell your information)
• Right to Non-Discrimination - Not be discriminated against for exercising your privacy rights
• Right to Correct - Request correction of inaccurate personal information

6.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days. For account deletion, you can also delete your account directly through your account settings in the dashboard.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authenticate you
• Remember your preferences and settings
• Analyze how you use our service to improve it
• Provide personalized features and content

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our service.

8. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this page
• Sending you an email notification (for significant changes)
• Displaying a notice in our application

Your continued use of our service after any changes constitutes acceptance of the updated Privacy Policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: