Privacy Policy

Last updated: March 2026

What we collect

When you install BinHQ on Shopify, we access your store's order, product, inventory, location, and fulfillment data through Shopify's API. We do not access or store customer personal information (names, emails, addresses) — we only reference Shopify order IDs.

For direct login accounts, we store your email address and a bcrypt-hashed password. We never store plaintext passwords.

How we use your data

Your data is used exclusively to provide BinHQ's warehouse management features: pick list generation, inventory tracking, bin assignments, and order fulfillment. We do not sell, share, or use your data for advertising.

Data storage

Data is stored in PostgreSQL databases hosted on secure cloud infrastructure (Neon/Railway). All connections use TLS encryption. WooCommerce API credentials are encrypted at rest using AES-256-GCM.

Data retention

Your data is retained while your account is active. When you uninstall from Shopify, your store is deactivated and data is preserved for 48 hours in case of re-install. After 48 hours, Shopify sends a SHOP_REDACT webhook and we permanently delete all your data.

Third-party services

BinHQ uses Shopify's API to read and write order/inventory data. We do not share your data with any other third parties. We use Neon (database hosting) and Railway (application hosting) as infrastructure providers.

Your rights

You can request a copy of your data or request deletion at any time by contacting support@binhq.io. Uninstalling the app triggers automatic data deletion per Shopify's GDPR requirements.

Contact

For privacy questions, contact us at support@binhq.io.