InventoryPath Rep Desk privacy notice

Last updated: October 23, 2026.

AvanSaber Inc. operates InventoryPath Rep Desk for Shopify merchants. Read this notice alongside the AvanSaber company privacy policy. The InventoryPath website privacy supplement covers public website analytics and newsletter subscriptions.

Contact [email protected] about app privacy or security.

Purpose and merchant responsibilities

The merchant chooses the representatives, buyers and products involved and is responsible for lawful access, appropriate notices and permission to process that information. Processing supports restricted rep access, proposal review, merchant-approved Shopify drafts, attributable commission records, subscription verification, support and security.

App data is not used for sale, advertising, profiling or model training. Commission figures assist merchant review; they are not automated payroll or payment instructions.

Information involved

• Shop and access records: store and installation identifiers, encrypted Shopify session credentials, required permission checks, merchant approval records and subscription or usage status.
• Buyer records: Shopify customer identifiers, names and default shipping addresses, including company and recipient details where present, for assigned-buyer labels and draft delivery addresses. Customer Name and Address are the requested protected fields. Customer Email and Phone are not requested.
• Products and proposals: product and variant identifiers, titles, SKUs, prices, assignments, pricing policies, quantities, proposal versions, notes, calculated totals and Shopify draft references or uncertain outcomes.
• Order and commission records: draft-to-order attribution, financial status, net merchandise and refund evidence, commission rates, ledger adjustments, opening balances and settlements entered by the merchant. Commission attribution is limited to orders completed from app-created drafts. Necessary permission and order-access probes can read other order metadata; this is not a claim that every order read is attributable.
• Rep identity: merchant-supplied rep names and email addresses, invitation and sign-in records, expiring grants and access/security metadata. Rep email processing is separate from Shopify customer Email access.

Do not put unnecessary sensitive information, credentials or sign-in codes in proposal notes or support messages.

Access and safeguards

The app uses encrypted private data, HTTPS, access-controlled expiring sessions and private downloads. Rep access is restricted to the merchant’s assignments and can be revoked; merchant actions require current Shopify authentication and the appropriate app authority. Authorised maintainers can access necessary information for support and security.

These controls do not establish independently rotated encryption keys for each store, a third-party certification or an absolute security guarantee. Revoking access cannot remove information a previously authorised person has already seen or saved.

Providers and processing locations

Shopify supplies platform authentication, customer/product/draft/order access and app billing. Amazon Web Services hosts the application on AvanSaber’s managed infrastructure; Cloudflare supplies DNS, edge HTTPS and security, and RunCloud manages the host. ZeptoMail is the transactional provider for rep invitations and sign-in codes. Brevo is not used for private rep operations.

This processing can take place in the United States, including when merchants, buyers or reps are elsewhere. General rights and international-processing information is in the company privacy policy.

The public website follows its established analytics and consent implementation. The operational rep portal contains no website marketing trackers or cross-domain website code.

Retention and deletion

Proposals normally retire after 90 days. Unresolved, possibly dispatched create attempts remain held beyond that period for operator reconciliation; an ambiguous create is never automatically retried. Required privacy erasure overrides ordinary retention.

Ledger history covers a rolling twelve-month retained event window. Earnings, reversals, settlements, adjustments and opening entries all expire; expired balances do not carry forward automatically. Merchants must export required records before expiry. Private CSV exports expire seven days after generation. Rep grants expire and can be revoked. Privacy erasure takes precedence over ordinary retention.

Uninstall handling revokes rep access and removes serving app data through authenticated lifecycle cleanup. Shopify drafts and orders already created remain in the merchant’s Shopify store. Non-identifying usage or safety records may remain where needed to preserve billing-window allowances and uncertain-attempt safeguards without restoring erased content.

Daily encrypted local backups and an independent erasure journal support recovery. A populated quarantine restore and later-erasure replay were tested, with recovered access disabled. Deletion instructions must be applied before any reactivation so an older backup cannot silently restore erased data or revoked access. This does not promise immediate physical deletion from every backup or verified recovery from an independent off-server copy.

Requests and contact

Customers and reps should contact the merchant about access, correction, export or erasure of their information. Shopify privacy requests and merchant instructions must be handled through authorised app and support processes. Providing a response file to a merchant does not by itself deliver it to the requesting person.

Contact [email protected], identifying the store and issue without sending private invitation links, sign-in codes or unnecessary personal data. The company privacy policy describes general rights and request handling. We provide meaningful notice of processing changes where required.

AvanSaber Inc. operates InventoryPath Rep Desk.

App terms · Support · Workflow guide

Optional merchant setup tips

Optional setup tips are available. The guide works without email enrollment. Only the authenticated store owner can opt in, and the chosen help inbox must be verified.

If the store owner requests optional setup tips, the optional service processes the deliberately supplied merchant help inbox, verification status, owner-authorised purpose/version/timestamp, preference and withdrawal evidence, confirmed store time zone, installation context and coarse app progress. Onboarding adds no Shopify customer Email access or new Shopify scope.

The optional service is hosted on existing AvanSaber-controlled infrastructure, separately from core app databases and services. It receives a minimal read-only view of readiness, qualifying outcomes and known blockers. It does not receive Shopify access tokens or underlying order/customer details, artwork, supplier files, PO rows, invoices, assignments, commission values or rep credentials.

Brevo receives the intentionally supplied verified merchant email, generic app help content and minimal delivery/unsubscribe identifiers. It may insert open-tracking pixels and rewrite links, and processes delivery, open and click events. Opens and clicks are not proof of setup completion and do not select milestones. This feature installs no such tracking in the embedded app or private buyer, supplier or rep pages. Provider tracking is not disabled.

Keyed pseudonymous inbox indexes and minimal dispatch reservations enforce shared portfolio sending limits and stop-all preferences. These indexes are not anonymous. App credentials and domain databases remain separate; this shared boundary does not let one app browse another app’s domain records. Requested verification and security messages have a separate purpose and do not consume the educational-email allowance.

Incomplete verification preferences and challenges are cleaned within thirty days. Codes expire after ten minutes and are cleared after expiry or attempt limits. Detailed dispatch evidence is normally retained for up to ninety days after the program window; pending external cleanup identifiers remain until resolved. Consent/preference evidence may remain for up to twelve months after the window or withdrawal. Minimal pseudonymous suppression and closed-program records remain to prevent unintended re-enrollment after reinstall or recovery. Restored optional databases are quarantined and current withdrawals and installation state must be reconciled before sending resumes.

App-owned disposable recipient lists and exclusively owned contact profiles are removed when safe. Shared contacts, unrelated brand data and global unsubscribe records are preserved. Brevo sent campaigns are archived where deletion is unavailable; archival is not deletion of historical delivery records. Individual setup-verification logs and previews are deleted within thirty days, or earlier on withdrawal or erasure when identified; recovered lost IDs are deleted immediately. Historical marketing delivery records and provider backups may require provider support or remain under provider retention. Removal from every record or backup is not instantaneous.

Uninstall or data erasure stops optional sending once detected, clears current inbox/challenge/guide data and queues provider cleanup. Before education dispatch, current authorisation and installation are checked again. Delayed lifecycle or provider queues can leave a message in flight; it cannot always be recalled immediately. Core app operations are independent of optional-service availability.

The owner may stop this app’s tips or all InventoryPath app setup tips for the verified inbox. Brevo’s separate unsubscribe and account-wide suppression also apply. No contacts are imported automatically. Choosing not to enroll does not limit the app, and operational recipient verification does not enroll buyers, suppliers or reps. Optional setup-tip sender and Reply-To are Inventory App at [email protected]. Existing product support and privacy requests remain with [email protected]. Both brands belong to AvanSaber Inc.