Data security

How DTC Planner protects your store and planning data, and what you control.

Shopify access

DTC Planner asks Shopify for read access to products, inventory, orders and locations, and for permission to update inventory. It uses that permission for one thing: when you record a purchase order receipt, it adds the units received to the receiving location's stock. Locations you mark as updated by your 3PL are left alone. It never edits products, prices or orders. You choose how often it syncs: manually, every 6 hours or every 24 hours.

What we keep

• Products and variants: product and variant names, SKU codes, product image links, selling prices and Shopify's product and variant IDs. Gift cards and items Shopify doesn't track stock for are skipped.
• Inventory: units available, added up across your locations, saved as a daily stock figure per product. We also read Shopify's “Cost per item” to fill in unit costs you haven't entered.
• Orders: paid orders from up to the last 12 months. We use each order's line items (product, quantity, price and discount) and its sale date to work out units sold and sales value per product by week, month and 30-day period. We save those totals. We don't save individual orders.
• Customer details: Shopify includes customer details in order data. DTC Planner doesn't use or store them: no customer names, emails, phone numbers or addresses are saved.
• Locations: read so stock can be summed across them.

Your data is kept apart from other brands'

Every record, from products and stock to purchase orders and forecasts, belongs to one workspace. Database rules stop one brand from reading another's data, and Delphi only sees the workspace you have open.

Access and roles

Sign-in uses an emailed link or Google, so brand accounts have no passwords to leak. The only accounts with passwords are ones we set up for app store reviewers. Owners, admins and members have different permissions, and a workspace always keeps at least one owner. A small number of Move Supply Chain staff can access workspaces for support, and on the Expert plan your analyst works in your workspace.

Credentials and encryption

Shopify access tokens and other connection credentials are stored encrypted on our servers and never sent to the browser. All traffic uses HTTPS. Data is held in a managed cloud database.

AI assistants

If you connect Claude or ChatGPT, you approve it on a DTC Planner page after signing in. The assistant can read your active workspace, checked by the same database rules as the app, and each person's requests are rate-limited. The only thing it can save is a draft purchase order for you to approve; it cannot approve or send POs, or change other data in DTC Planner or Shopify. You can disconnect it at any time from the assistant.

No data sharing

Your data is used only to run DTC Planner for you. We don't sell it, share it with other customers, or use it to train AI models. The services that process data for us are listed in our Privacy Policy.

Uninstalling and deletion

When you uninstall the app from Shopify, syncing stops and our tokens for your store are deleted straight away. About 48 hours later Shopify asks us to erase your store's data: a workspace installed from the Shopify App Store is deleted in full, and a workspace created on our website loses the data that came from Shopify. To delete your workspace data at any other time, email lara@movesupplychain.com and we'll do it within 30 days.

Report a concern

Security questions or a suspected issue: lara@movesupplychain.com.