Privacy Policy
Last updated: June 4, 2026
This Privacy Policy explains how WiseRoad Solutions, LLC (“WiseRoad,” “we,” “us”) — the operator of the TinyOps Shopify app — collects, uses, and protects information when a merchant installs and uses TinyOps.
1. Our role
For information about a merchant’s own account and store, we act as a data controller. For the personal data of a merchant’s customers (shoppers) that we process to deliver the app’s features, we act as a data processor / service provider on the merchant’s behalf — the merchant is the controller and is responsible for having a lawful basis and for providing privacy notices to their customers.
2. Information we process
- Store & account data: your store’s domain, owner/contact email, store timezone, subscription plan, and the settings you configure in the app.
- Order, product & inventory data: orders, line items, products, and inventory levels — read from Shopify to run the automations you enable.
- Customer personal data: customer name, email address, and shipping/billing address — accessed only as needed to generate order invoices and to send the emails you enable (e.g. review requests). This is Shopify “protected customer data.”
- Email logs: the recipient address, subject, timestamp, and delivery status of emails we send on your behalf.
- Operational logs: our own internal admin-access logs recording when our staff access the support admin panel and any actions taken.
3. How we use information
We use the information solely to provide and operate TinyOps: generating invoices and reports, sending the alerts and emails you turn on, exporting your data where you request it, billing, and support. We do not:
- sell or rent personal data;
- use customer personal data for advertising or marketing of our own;
- use your data to train machine-learning models.
4. Sub-processors
We rely on a small set of vetted providers to run the service:
| Provider | Purpose |
|---|---|
| Shopify | App platform & source of store/order data |
| Railway | Application hosting & PostgreSQL database (United States) |
| Resend | Transactional email delivery |
| Cloudflare R2 | Storage of merchant-uploaded invoice logos |
| Google Sheets export (when you connect it) & admin sign-in |
5. Storage, security & location
Data is processed and stored in the United States. We encrypt data in transit (TLS) and at rest, keep our database on a private network, restrict access on a least-privilege basis, and log administrative access. See our Security page for details.
6. Data retention & deletion
We keep your data only while TinyOps is installed. When you uninstall, Shopify notifies us and we permanently delete your store’s data shortly afterward (typically within 48 hours), in line with Shopify’s requirements. We also honor Shopify’s mandatory privacy webhooks for individual customer data requests and customer/shop redaction.
7. Your rights
Depending on your location, you (or a merchant’s customers) may have rights to access, correct, delete, or port personal data, or to object to processing. Because we process customer data on a merchant’s behalf, shoppers should direct requests to the merchant; we will assist the merchant in fulfilling them. Merchants may contact us directly at tinyops@thewiseroad.com.
8. Children
TinyOps is a business tool and is not directed to children under 16. We do not knowingly collect their personal data.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.
10. Contact
WiseRoad Solutions, LLC
Email: tinyops@thewiseroad.com