Stelar Digital

Privacy Policy

Effective date: August 25, 2026

This Privacy Policy describes how Stelar Digital LLC's applications and services ("the Services"), operated by Stelar Digital LLC ("we", "us"), handle information. The Services include our Shopify applications (FlatInvoice, StockPing, Aivis, Stockyard) and our web-based content tools, including the tool that publishes market-update videos to our own social media accounts. Two earlier Shopify apps, CleanUpsell and PreorderLite, are discontinued and no longer distributed.

Shopify applications

The following sections describe how our Shopify applications (FlatInvoice, StockPing, Aivis, Stockyard) handle merchant and order data.

Aivis

Aivis has two parts. First, it analyzes a merchant's orders to identify which sales originate from AI shopping agents (such as ChatGPT, the Shop app agent, Copilot, or Gemini). To do this it stores a minimized, order-level attribution mirror of the merchant's recent orders. This mirror deliberately contains no customer names, email addresses, or postal addresses. For each order it retains only:

Why we store it: these order-attribution signals are the only reliable way to distinguish an agent-placed sale from a direct human one.

Where it is stored: on our own server. It is never sold, shared, or disclosed to any third party.

Retention: attribution rows are retained for at most 90 days and then automatically purged. They are also deleted immediately when the merchant uninstalls the app (Shopify's shop/redact webhook), and any order named in a customers/redact request is deleted from the mirror on receipt.

Second, on the Aivis Pro plan, Aivis checks whether the merchant's store is recommended by AI assistants for relevant shopper queries. To run a scan, Aivis sends the store's name, domain, and a small sample of product titles to Anthropic's Claude API (including Claude's live web search feature) to generate shopper-style questions and evaluate the results. No customer personal data is included in these requests. Scan results (queries, whether the store was cited, and other sites mentioned in the AI's response) are stored so merchants can review scan history; they are not shared with third parties beyond Anthropic, which processes the requests on our behalf.

Information Our Shopify Apps Access

To provide their core functionality at the merchant's request (for example, generating PDF invoices and packing slips, or sending stock alerts and back-in-stock notifications), our PDF and merchandising apps (FlatInvoice, StockPing) access order and store data from the merchant's Shopify store, including:

This data is accessed solely for the purpose of providing the requested app functionality. Stockyard also reads order data from the merchant's Shopify store — order line items and quantities only — to calculate reorder timing and dead-stock reports; it does not access customer names, email addresses, or billing/shipping addresses.

What We Store

CleanUpsell and PreorderLite are discontinued and no longer distributed — both are offline and there is no running service behind them.

FlatInvoice stores a record of each invoice email it sends on the merchant's behalf, including the customer's email address, when the merchant uses the auto-email-invoice feature: a send record (shop, order, recipient address, send status) and a delivery record (recipient address, delivery status from our email provider, Resend). These records are pruned opportunistically once older than 180 days, and are deleted immediately for a named customer on a customers/redact request, or in full for the store on shop/redact (app uninstall).

StockPing stores the merchant's configured alert email address (where low-stock/out-of-stock notifications are sent) for as long as the app is installed, plus a delivery record (recipient address, delivery status) for each alert sent. If the merchant enables the back-in-stock signup feature, shopper email addresses submitted through that form are also stored (email, product/variant, signup date) until the merchant uninstalls or the record is redacted via Shopify's GDPR webhooks. These records are deleted for a named customer on a customers/redact request, or in full for the store on shop/redact.

Stockyard reads and stores supplier, purchase-order, and inventory data from the merchant's Shopify store to power reorder alerts and dead-stock reports (suppliers, purchase orders and line items, cost history, reorder rules, alert settings, inventory sync state). It has no storefront-facing surface and does not capture shopper personal data.

Beyond the above, the only data we retain across these apps is:

One more app retains additional, minimized data as described in its section above: Aivis stores an order-level attribution mirror for up to 90 days, and, on the Pro plan, AI-visibility scan results. Neither contains customer names, emails, or addresses.

Data Sharing

We never sell or rent any data, and no third-party analytics or advertising services receive it. We use a small number of service providers (subprocessors) to operate the apps: Resend, for transactional email delivery (invoice emails, stock alerts, back-in-stock notifications, and Stockyard's reorder/dead-stock alert emails) — Resend receives the recipient's email address and the message content needed to send it (Stockyard stores the merchant's configured alert email address and the confirmation tokens used to verify it before it is used to send alerts); and Anthropic, for Aivis's AI-visibility scans, as described above. Data is shared with these providers only as needed to provide the feature it supports, never for their own use, marketing, or resale. For paid Conformance Report purchases, Stripe processes card payments (we never see card numbers) and Google (Gmail) delivers the purchased report by email.

Data Retention and Deletion

Store settings and session tokens are deleted immediately upon app uninstall, triggered by Shopify's shop/redact webhook. Aivis's order-attribution mirror is retained for at most 90 days, then automatically purged; it is also deleted in full on app uninstall, and individual orders are deleted on a customers/redact request. FlatInvoice's invoice-email records are pruned opportunistically once older than 180 days and are deleted for a named customer on a customers/redact request. StockPing's back-in-stock signup and alert-delivery records are deleted for a named customer on a customers/redact request. Both are deleted in full, along with all other store data, on shop/redact (app uninstall).

Privacy rights requests (GDPR/CCPA)

Our Shopify apps honor Shopify's mandatory privacy webhooks in full:

Outside of the Shopify webhook flows above, you can email us at any time to review, correct, or delete the data we hold about you, using the contact information below.

TikTok integration

One of our web-based content tools uses the TikTok API solely to publish Stelar Digital's own market-update videos to Stelar Digital's own TikTok account. This tool does not collect, store, or process personal data belonging to TikTok users. TikTok account authorization tokens are stored securely server-side and are used only for the purpose of publishing our own content.

x402 API payments

When an agent or person pays a 402 challenge, we process: the paying wallet address, transaction identifiers on the settlement network, the endpoint called, request metadata (timestamp, IP address, user agent), and the response served. We use this to deliver the service, prevent abuse, and keep required financial records. Wallet addresses and transaction records are retained as business/tax records; request logs are retained for 14 days. Payment settlement occurs on public blockchains — on-chain data is public by nature and outside our control. We do not sell this data or use it for advertising.

Security

All data is encrypted in transit using TLS. The limited data we do retain at rest — shop domains, app settings, session tokens, Aivis's order-attribution mirror, and Aivis's scan results — is held on our own secured infrastructure and never contains customer names, emails, or addresses.

Do Not Track

Like most sites, we do not respond to browser Do Not Track signals.

Cookies

We do not set cookies ourselves and we run no analytics or advertising trackers on this site. Cloudflare, our hosting/CDN provider, may set its own security cookies (for example, bot-management) as required to serve the site and keep it safe from abuse; these are outside our direct control.

Forms on this site

Four places on this site collect information directly from you:

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

Contact

Questions about this policy or your data can be sent to stelardigital@stelardigital.com.

Stelar Digital LLC · 3200 Pleasant Grove Blvd, 9111, Roseville, CA 95747 · stelardigital@stelardigital.com

Not financial advice. Content is informational only — see our Disclaimer.