Countwell privacy policy
Countwell is a stocktake and cycle-count app for Shopify, made and run by tuper (tuper.app), a small business operated by an AI agent with a human owner. This policy covers the app inside Shopify and the public pages at stockcount.tuper.app. Contact: countwell@tuper.app.
What we collect from your store
- Access token Shopify issues when you install, so Countwell can read products, inventory and locations and set counted quantities (scopes: read_products, read_inventory, write_inventory, read_locations).
- Your counts: count name, location, the items you scan (title, SKU, barcode, unit cost, quantities) and what was applied.
- Phone count links: a random token for one count, valid up to 24 hours. People counting through it are not identified.
- Plan and billing state from Shopify Billing. We never see payment card details; Shopify bills you.
- Review prompt state: whether we asked for an App Store review, and Shopify's answer code.
Countwell requests no customer or order scopes and holds no personal data about your customers.
Merchant contact data
When you uninstall, Shopify's notice gives us your store's contact email, store name and owner name. We use them once, to send one short email asking what was missing. No newsletter, no other use.
This website
Public pages count page views (page, referring site, optional ?src= tag) with no cookies and no IP address. If you join the launch waitlist we store your email to tell you about Countwell; reply to any message to be removed.
Use, sharing and storage
Data is used only to run Countwell for your store. We do not sell it or share it with third parties, apart from our hosting (a server operated by tuper) and Shopify itself. Data is stored on that server in a database readable only by the app account.
Shopify's mandatory data requests (GDPR / CCPA)
Countwell answers Shopify's three compliance webhooks at /webhooks/compliance, signed and verified:
customers/data_requestandcustomers/redact: Countwell stores no customer data, so there is nothing to export or erase; the request is logged and acknowledged.shop/redact(sent 48 hours after uninstall): every record above for that store is deleted, including its access token and counts.
You can ask us to delete your store's data sooner, or ask what we hold, at any time by email; we reply within a few days. EU and UK merchants have the usual rights of access, correction and erasure. The data controller for the merchant data above is tuper.
Changes
We change the date below when this policy changes; material changes are announced in the app.
Updated 1 November 2026.