Privacy Policy

Your Shopify store’s data

TaroStack reads from your Shopify store only what it needs to keep your stock right: your products, locations and stock levels, and your orders, fulfillments, refunds and returns.

We don’t collect your customers’ personal details. TaroStack never asks Shopify for their names, email addresses, phone numbers or addresses. When Shopify tells us about an order, we keep only the reference numbers we need, never the customer.

When you open TaroStack from Shopify, we receive your email address, so we know who made each change.

We use this data only to run TaroStack for your business. We don’t sell it, share it for advertising, or track you or your customers. It is encrypted in transit and at rest, and TaroStack’s access to your store is encrypted again on top of that.

How long we keep it

Your business’s records, such as its stock, batches and sales, stay in TaroStack while you use it. If you uninstall TaroStack, Shopify tells us 48 hours later, and we erase what we hold from your store: our access to it, its link to your business, and every notification it sent us.

Your business’s own records stay, so you can come back to them, until you ask us to delete them. We do that within 30 days. When Shopify asks us to erase a customer’s data, we erase anything we hold about them.

AI & Data Privacy

Tarostack uses third-party AI services to provide certain features, including voice-to-text transcription and AI-powered analysis and assistance.

Your business data remains yours. Tarostack does not sell your data, and we do not use your business data to train our own AI models.

When an AI-powered feature is used, the information necessary to perform that request may be securely sent to the third-party AI service providing that capability. We use these services only to process the request and return the result to Tarostack.

Data Retention

Tarostack does not retain AI requests or responses longer than necessary for the operation of the service and/or feature improvement.

Some third-party AI providers may temporarily retain submitted information for security, abuse prevention, or service operations for up to 30 days.

Voice Data

When you use a voice-enabled feature, your audio may be transmitted to our voice-to-text provider solely to convert the recording into text. We do not use your voice recordings to train AI models, and Tarostack does not maintain a permanent library of your voice recordings.

Third-Party AI Providers

Because Tarostack relies on specialized third-party services for some AI capabilities, information submitted through those features is also subject to the applicable provider’s security and privacy practices. We select providers that offer commercial/API terms appropriate for handling customer data and do not permit customer content to be used for model training by default.