← All privacy policies

Varr Preorder & Back in Stock Privacy Policy

Effective date: October 17, 2026

1. Introduction

Varr Labs ("we", "us", or "our") is the developer of Varr Preorder & Back in Stock (the "App"), a Shopify app for preorders and back in stock alerts. This Privacy Policy explains what data the App uses, why, and how we protect it.

When a merchant installs the App, the merchant is the data controller for the personal data of their buyers. Varr Labs processes that data on the merchant's behalf and only to run the App for that merchant.

2. Data We Collect from Merchants

  • Store details: store domain and store name.
  • Owner contact: the store owner's email address.
  • Plan and billing status: your plan and whether it is active. All billing goes through Shopify. We never see or store card details.
  • App settings and campaigns: the preorder and back in stock settings and campaigns you create in the App.

3. Data We Process About Your Buyers

  • Email address: from the "Notify me" back in stock form, which the buyer fills in, and from preorder orders.
  • First and last name: from preorder orders.
  • Order data for preorder items: order ID, line items, amounts, and preorder dates.

The App does not read buyer phone numbers or addresses.

4. How We Use Data

  • Send back in stock emails to buyers who signed up.
  • Send preorder emails: confirmation, delay, shipping, and reminder emails.
  • Let buyers ask to cancel a preorder.
  • Show merchants their preorders, back in stock signups, and the sales the App helped bring in.
  • Provide support, fix problems, and keep the App secure.

We do not sell personal data. We do not use it for advertising. We do not build profiles of buyers. We do not make automated decisions that have legal or similar effects on anyone.

5. Consent and Unsubscribing

  • Back in stock signups are opt-in. A buyer is only added when they fill in the "Notify me" form themselves.
  • Every email has a one-click unsubscribe link.
  • We stop sending to addresses that bounce or unsubscribe.

6. Sub-processors

We use these service providers to run the App. Each one only gets the data it needs for its task.

  • Amazon Web Services: hosting and database, in the US East region.
  • ZeptoMail by Zoho: sending emails.
  • Sentry: error monitoring.
  • PostHog: product analytics inside the App admin.
  • LogSnag: internal alerts about App events.
  • Crisp: support chat.
  • Shopify: the platform the App runs on, and billing.

We may also share data to comply with the law or a lawful request, or to protect our rights and the security of the App.

7. Data Security

  • All data is encrypted in transit (HTTPS).
  • Data is encrypted at rest. This includes the database and its backups.
  • Shop access tokens have an extra layer of encryption.
  • Test and production systems are kept separate.
  • Only Varr Labs staff can access the systems, and they must use multi-factor authentication.
  • Access to the systems is logged.

8. Data Retention and Deletion

  • After uninstall: we delete your store's data 30 days after you uninstall the App.
  • Shopify deletion requests: when Shopify sends a customers/redact or shop/redact request, we delete the data at once.
  • Audit records: these expire after 90 days.
  • Data requests: when Shopify sends a customers/data_request, we send the buyer's data to the merchant.

9. Buyer Privacy Rights

Buyers may have the right to access, correct, or delete their personal data. Because the merchant is the data controller, buyers should contact the store where they signed up or ordered. The merchant can then ask us for help, or Shopify sends the request to us. If a buyer contacts us directly, we will pass the request to the merchant.

Merchants can send privacy requests to us at the email address in section 12.

10. International Transfers

The App stores data in the United States (AWS US East region). Some sub-processors may process data in other countries. Where required, we apply appropriate safeguards for cross-border transfers.

11. Changes to This Policy

We may update this policy. We will publish each update on this page and change the effective date at the top. If a change is significant, we will also tell merchants by email or in the App before it takes effect.

12. Contact Us

If you have privacy questions or requests, contact hello@varrlabs.com.

Varr Labs
Website: https://varrlabs.com