SiMemo Privacy Policy
Version: 2026-10-13
# SiMemo Privacy Policy
Version 2026-10-13. Published with provider approval on 13 October 2026. Merchant Terms and the DPA take effect for a merchant upon affirmative acceptance.
SiMemo: Back To Stock is provided by Simetrys d.o.o., Ulica braće Radić 24, 42000 Varaždin, Croatia, OIB 50988236678. Contact: info@simetrys.com.
## Who is responsible
The merchant whose store you visit decides how SiMemo is used and is responsible for customer notification requests. Simetrys processes those requests to provide the service for that merchant. Simetrys is responsible for its own merchant account, support, security and service administration records.
## Information we use
For a restock request, we use the email address supplied, the selected store, product and variant, the notification request and its timestamp, and the request's delivery or cancellation status. We use product names, prices, images, links and availability to prepare notifications. Delivery records may include message identifiers, timestamps, delivery failures and complaints. Short-lived abuse-prevention identifiers help limit automated requests.
For merchants, we use the Shopify store identifier, store name and contact address, installation and authorization records, selected plan and usage, template settings, and any sender domain configuration. Shopify access credentials and provider credentials are protected server-side. We also process information a person chooses to include in a support request.
When sales reporting is enabled, we read the order email address, order identifier, creation date, payment and cancellation status, currency and net paid amount. We match the email address to a notification sent in the same store within the preceding seven days. The report counts the full paid order, including other products, shipping and tax, less refunds; it does not require a link click. We retain the order identifier, matched notification reference, dates, currency and amount, not a separate copy of the order email, customer profile, address or order line items. These records are removed on applicable customer or store erasure requests. Hashed order identifiers prevent erased records from being recreated by delayed events.
## Why we use it
We use this information to record a requested notification, check product availability, group available products into an email, send and manage delivery, prevent unwanted repeat messages, provide the merchant's subscription list and settings, apply plan limits, and respond to support and privacy requests. A restock request does not subscribe the shopper to a separate marketing newsletter.
The merchant is responsible for identifying the applicable legal basis for its customer processing and explaining it in the store's own privacy notice. Simetrys uses merchant account information to provide its service, maintain its security and meet applicable legal obligations.
## Service providers and international processing
Shopify supplies store, product and, when sales reporting is enabled, order information and manages app billing. Cloudflare hosts the application, database and delivery queues. Resend processes email delivery. These providers receive information needed for their respective services. Information can be processed outside the visitor's country. Resend's published data processing terms describe US storage and international transfer safeguards; choosing an EU sending region does not mean all message data is stored in the EU.
We do not sell restock request data or use it to build advertising audiences.
## Retention and cancellation
Notification requests remain available while needed for the requested notification and the merchant's service records. Cancellation stops future notifications for that request; it is not the same as erasing every associated record. Delivery history is retained for service administration until an applicable deletion request or store-data deletion is processed.
Privacy requests remain open until the required local and service-provider work is resolved. After completion, encrypted request details and provider references are cleared. A minimal completion record is retained for 365 days. Limited suppression and deletion-protection identifiers may remain necessary to prevent further sending or recreation of deleted data. Backup recovery is quarantined until applicable deletions have been reapplied.
Resend currently documents 30-day email and log retention for its Free, Pro and Scale plans, with seven-day backups. Earlier removal of a specific message requires its support process. A message disappearing from a dashboard is not treated as confirmation of deletion.
## Your choices and rights
Use the cancellation link in a notification to stop that request, or contact the merchant. For access, correction, deletion, restriction, objection or portability requests where applicable, contact the merchant or info@simetrys.com. We may need proportionate information to verify and locate a request. You may also complain to your competent data protection authority.
## Changes and contact
Contact info@simetrys.com with questions about SiMemo's processing.
SiMemo support and setup · Contact SIMETRYS
## Service agreement and access records
We record the merchant shop, document version, exact text, hash and timestamp of an affirmative agreement acceptance. The app records authorized access attempts to subscription lists and privacy exports, using a pseudonymous actor, store scope, action and timestamp. Access logs are kept for 90 days. Shop-specific logs and acceptance records are removed during applicable store redaction. Session tokens, customer emails and query text are not copied into those access logs.
Contact SIMETRYS