NodlinePrivacy policy
Last updated 2026-10-14
Nodline (“we”) is a Shopify app operated by Sticks Capital LLC, a Delaware limited liability company. This policy explains what we collect when a merchant installs Nodline from the Shopify App Store, and when a supplier uses a Nodline confirmation link.
What we collect
| Data | From | Why |
|---|---|---|
| Purchase orders (names, status, line items, quantities, unit costs, supplier names, destination location name) | Shopify, read-only | To show your purchase orders and compare supplier answers with what you ordered |
| Store name and identifiers; staff user IDs who use the app | Shopify | To run the app for your store and keep an audit trail of changes |
| Supplier names, contact names and email addresses you enter; your purchasing reply-to email | You | To send confirmation requests on your behalf |
| Confirmation emails you send (subject and message text, recipient, reply-to) | You | Stored with the request as a record of what was sent, and sent to your supplier through our email provider |
| Supplier answers (confirmations, quantities, dates, notes) | Suppliers, via the confirmation link | To show you what your supplier committed to |
| Email delivery status (sent, delivered, bounced, complained) | Our email provider | To show delivery problems and stop emailing addresses that bounce |
We do not store your customers’ personal data (Shopify customer or order information). We do not sell data, use it for advertising, or use it to train AI models. The supplier confirmation page sets no cookies and uses no trackers.
Service providers
Shopify (platform and billing); Render (hosting and database, United States); Resend (transactional email, United States; receives the content of confirmation emails to deliver them); Sentry (error monitoring; configured to exclude purchase-order content); Cloudflare (DNS and email routing). Each processes data only to provide its service to us.
Security
Shopify access tokens are encrypted at rest. All traffic uses HTTPS. Each store’s data is isolated from every other store’s. Supplier links are long random values stored only as one-way hashes, expire, and can be cancelled by you.
Retention and deletion
We keep your data while Nodline is installed. When you uninstall, we stop all processing and delete your access tokens immediately. When Shopify sends the shop data erasure request (48 hours after uninstall), we delete all data for your store, including background job data, within 30 days and normally right away. Addresses that bounced or marked our email as spam are kept on a suppression list to protect email deliverability.
Your rights
Merchants, suppliers and their staff can ask to access, correct or delete personal data we hold by emailing support@nodline.app. Depending on where you live (for example the EU, UK or California) you may have additional rights under local law. We respond within 30 days.
Changes and contact
We will post changes here and update the date above. Contact: support@nodline.app · Sticks Capital LLC, c/o Entity Protect Registered Agent Services LLC, 1201 N Orange St., Suite 7665, Wilmington, DE 19801-1186.