Schedule Demo

ONIT Global, Inc.

Privacy Policy

Effective Date: June 1, 2026  ·  Last Updated: June 1, 2026

1. Overview

ONIT Security ("the App", "we", "us", or "our") is a Shopify application published by ONIT Global, Inc. that provides inventory protection and security monitoring for Shopify merchants. This Privacy Policy explains what data we collect, how we use it, how long we retain it, and your rights as a merchant or end customer.

By installing ONIT Security from the Shopify App Store, you ("Merchant") agree to the terms of this Privacy Policy.

2. What Data We Collect

ONIT Security collects only the minimum data necessary to provide its inventory monitoring service. We do not collect, store, or display customer names, email addresses, mailing addresses, phone numbers, or payment information.

Data collected from Shopify via API and Webhooks:

  • Inventory levels: Product SKU, quantity on hand, location — for detecting stock changes.
  • Inventory adjustments: Delta values, adjustment reason, timestamp — for classifying events (sale, restock, manual).
  • Order identifiers: Shopify Order ID, line item quantities — for reconciling inventory decrements with legitimate sales.
  • Fulfillment identifiers: Shopify Fulfillment ID, fulfilled quantities — for confirming shipment events against inventory changes.
  • Product metadata: Product title, variant title, inventory item ID — for displaying meaningful event descriptions in your dashboard.
  • Shop configuration: Store name, plan type, timezone — for configuring reports and off-hours alerts correctly.
  • Merchant email address: The email on your Shopify account — for sending your daily inventory report.

We do not collect: customer names, emails, addresses, phone numbers, payment information, customer browsing data, or any data from your customers' storefronts.

3. How We Use the Data

We use data solely to provide the ONIT Security service:

  • Store management: Tracking inventory level changes across your Shopify locations in real time.
  • Security monitoring: Detecting unauthorized or unexplained inventory adjustments and generating alerts.
  • Order reconciliation: Matching inventory decrements to legitimate order and fulfillment events to distinguish sales from theft or shrinkage.
  • Reporting: Generating daily and on-demand inventory security reports delivered to your merchant email.
  • Billing: Tracking transaction volume against your subscription plan limits.

We do not use your data for advertising, marketing to your customers, training AI models, or any purpose beyond providing the service you subscribed to.

4. Data Retention

We retain data only for as long as necessary to provide the service:

  • Inventory events: 6 months from the event date
  • Order receipt records: 90 days from the order date
  • Security alerts (resolved/dismissed): 90 days after resolution
  • Completed background job records: 7 days after completion
  • All merchant data: Deleted within 48 hours of app uninstall

Baseline "Initial Sync Snapshot" records are retained for the lifetime of the app installation to provide accurate delta calculations.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your data or your customers' data to any third party. We share limited data with trusted service providers solely to operate the App:

  • Contabo GmbH (server hosting, EU-based) — all app data stored on encrypted servers
  • Resend (transactional email) — merchant email address and report content
  • Shopify (app platform) — authentication tokens and webhook processing

6. Data Security

  • Encryption in transit: All data uses TLS 1.2+ (HTTPS)
  • Encryption at rest: AES-256 hardware-level disk encryption on all servers
  • Authentication: Valid Shopify OAuth session required for all data access
  • Webhook validation: HMAC-SHA256 signature verification on all incoming webhooks

7. GDPR and Privacy Law Compliance

ONIT Security complies with GDPR (EU), CCPA (California), and Shopify's mandatory privacy requirements. We respond to Shopify's mandatory privacy webhooks for customer data requests, customer data deletion, and shop data deletion. Upon app uninstall, all store data is permanently deleted within 48 hours.

8. Your Rights as a Merchant

You have the right to access, delete, export, or correct data we hold about your store. To exercise these rights, contact us at privacy@onitnetworking.com.

9. Children's Privacy

ONIT Security is a business-to-business application intended for Shopify merchants. We do not knowingly collect any data from individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect changes. For material changes, we will notify merchants via the App's in-app notification system or by email.

11. Contact Us

ONIT Global, Inc.
Email: privacy@onitnetworking.com
Website: onitnetworking.com