GDPR rights and exporting your data

You own your data. Restock Notify is the keeper, not the owner. Here is exactly what we store, how to get it back out, and the rights you and your customers have under GDPR, CCPA, and similar laws.

What we store

• Your shop profile, products, inventory, orders, and customer database — exactly as imported or synced.
• Every notification we drafted, queued, sent, and tracked (open / click / unsubscribe).
• Audit log of every administrative action under your account.
• Aggregated and anonymized data only if you've opted in to the benchmarking products. See Privacy Policy §4A for what aggregation means and the 50-shop minimum cohort rule.

We do not store: payment card data (that's Stripe's), real-time customer location, biometric or health data, or anything we'd need for advertising surveillance. None of that is in our database because we don't run those products.

Exporting your account ~5 min

Go to Account → Data export. Click Generate export. We build a ZIP containing:

• A folder per data type (customers, products, orders, notifications, materials, employees) as CSV.
• A JSON dump of every record exactly as it lives in the database, including soft-deleted rows.
• An audit log of every change made to your account in the last 12 months.
• A copy of the current Privacy Policy and Terms of Service at the moment of export.

For most shops the export builds in under a minute. You get an email with a signed, time-limited download link when it's ready (the link expires after 72 hours for security).

End-customer rights

Your customers have rights to their own data under GDPR (EU), CCPA (California), and similar laws. They can:

• Request access to what you have about them.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten").
• Withdraw consent — usually by clicking the one-click unsubscribe link in any message, which we honor immediately.

When a customer emails you with one of these requests, you can handle it from the customer's detail page in your dashboard. The Export this customer button gives you the full data dump in JSON. The Delete this customer button removes them from your account immediately and from our backups within 30 days.

Subscriber (your own) deletion

If you decide to leave Restock Notify entirely, contact support to request full account deletion. We delete everything within 30 days of the request and confirm in writing. The export bundle above is yours to keep — we recommend running it before deletion so you have your own copy.

Deletion is irreversible. If you might come back, downgrade to the Starter tier instead — your data stays intact and you can re-upgrade later without losing anything.

Where the legal terms live

Full legal terms are in the Privacy Policy and the Terms of Service. The Privacy Policy §4A specifically covers the aggregated-data opt-out (you control whether your anonymized data feeds the benchmarking products). The Terms §7 covers data ownership and licensing in full.