InventoryIntel is provided by Sparande Ltd (Company No. 16954958), a company within the Valo Astris group, operating as a division of Valo Astris Ltd (Company No. 16716075). Both are private limited companies registered in England and Wales, with their registered office at 2 Titchener Way, Hook, England, RG27 9GB (“Sparande”, “we”, “us”). Sparande Ltd is the party that contracts with you. By installing or using InventoryIntel, the merchant agrees to these Terms, our Privacy Policy, and the Data Processing Agreement set out below for the data we process on the merchant's behalf. Where a separate signed agreement is in place for an Enterprise plan, that signed agreement controls to the extent of any conflict.
Service terms
Service scope. InventoryIntel provides software tools for inventory analysis, campaign automation and recovery recommendations for Shopify merchants. Use of the service is subject to these terms and to Shopify's own platform policies.
Charges. Plans and charges are shown in the app and on its Shopify App Store listing, and are billed through Shopify Billing. Uninstalling the app cancels its subscription, so no further subscription charges are made. Charges already billed are not refunded, except where the law requires it or we agree to a refund in writing. Billing questions can be sent to support@sparande.co.uk.
No guarantee of results. Recommendations are predictive and operational in nature. Commercial outcomes depend on merchant execution, demand conditions, pricing decisions and store-specific factors outside InventoryIntel's control.
Merchant responsibilities. Merchants are responsible for the accuracy of their store data, for pricing decisions, for compliance with applicable laws governing customer communications, and for the configuration and use of any third-party services connected to their Shopify account.
Acceptable use. The service may not be used for unlawful activity, unsolicited communications, or any purpose that breaches applicable privacy, consumer protection, or marketing regulations. We may block a store that abuses the service, as described in the Privacy Policy.
Availability. We aim for high availability but do not warrant uninterrupted or error-free service. Scheduled maintenance, platform outages, or issues with third-party services may affect delivery.
Ending the service. The merchant can stop using the service at any time by uninstalling the app. What then happens to the merchant's data is set out in section 8 of the Data Processing Agreement.
Limitation of liability. To the maximum extent permitted by applicable law, Sparande's liability for any claim arising from use of the service is limited to the amounts paid by the merchant for the service in the three months before the claim. Nothing in these Terms limits liability that cannot be limited by law.
Changes. We will give at least 30 days' notice of a material change to these Terms, in the app or by email to the store's contact address. A change required by law, or needed urgently for security, may take effect sooner, and we will say why.
Governing law. These Terms, and any dispute or claim arising out of or in connection with them, are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
For legal enquiries, please contact support@sparande.co.uk.
Data Processing Agreement
This Data Processing Agreement (“DPA”) forms part of these Terms and governs Sparande's processing of personal data on behalf of the merchant, as required by Article 28 of the UK GDPR and the EU GDPR. It is accepted when the merchant installs or uses the app. If a separate signed data-processing agreement is in place for an Enterprise plan, that signed agreement controls to the extent of any conflict.
1. Roles of the parties
For personal data contained in, or obtained from, the merchant's Shopify store, the merchant is the controller and Sparande is the processor. We process that data only on the merchant's documented instructions, including with regard to transfers outside the UK and the EEA, unless the law requires otherwise, in which case we will tell the merchant first unless the law forbids it. The merchant's instructions are these Terms, the app's configuration, and the actions the merchant takes in the app. We will tell the merchant if we believe an instruction infringes data-protection law. The merchant is responsible for having a lawful basis for the underlying store data. For billing records, fraud and abuse prevention, and proof of deletion (Privacy Policy, section 5), Sparande acts as an independent controller.
2. Subject matter, duration, nature and purpose
Processing lasts while the app is installed plus the retention periods in the Privacy Policy. Its nature and purpose are inventory monitoring, velocity and stock-risk analysis, AI-assisted recovery recommendations, campaign execution, reporting, and the security and operation of the service. Data subjects are the merchant's staff and authorised users and, only for privacy requests Shopify forwards, the merchant's customers. Categories of personal data are staff identity and contact details (user ID, name, email address, locale), authentication and audit records, any personal data the merchant puts in free-text notes, and, for privacy requests, the customer's Shopify ID, email address and order IDs. No special-category data is processed.
3. Confidentiality
Everyone we authorise to process the merchant's personal data is bound by a duty of confidentiality.
4. Sub-processors
The merchant gives general authorisation for Sparande to engage sub-processors. The current list is in section 4 of the Privacy Policy. We bind each sub-processor by a written contract imposing data-protection obligations that are equivalent in substance to this DPA, and we remain responsible to the merchant for their performance. We will give notice of any new or replacement sub-processor by updating the list in the Privacy Policy and emailing the store's contact address at least 30 days before the change, and the merchant may object on reasonable data-protection grounds; if we cannot resolve the objection, the merchant may stop using the service by uninstalling.
5. Security
We take the measures required by Article 32, as described in section 7 of the Privacy Policy: encryption in transit and at rest, application-level encryption of Shopify access tokens, a database closed to the public internet, secrets kept in Azure Key Vault, role-based access in the app, redaction of credentials from logs, and separation of production from development data.
6. Assistance with data-subject rights
Taking into account the nature of the processing, we help the merchant respond to data-subject requests. We act on Shopify's mandatory privacy webhooks (customers/data_request, customers/redact and shop/redact) as the Privacy Policy describes, provide a merchant data export in the app, and answer the merchant's written requests to support@sparande.co.uk. When Shopify forwards a customer's data request, we compile what we hold for it and provide it to the merchant within 30 days, so that the merchant can answer its customer; we do not contact the customer ourselves.
7. Breaches, impact assessments and consultation
If we become aware of a personal data breach affecting the merchant's data, we will notify the merchant without undue delay after becoming aware of it, give the information reasonably available to support the merchant's own notification obligations, and take reasonable steps to contain and remediate it. We will give the merchant reasonable help, taking into account the information available to us, with security (Article 32), breach notification (Articles 33 and 34), data-protection impact assessments (Article 35) and prior consultation with a supervisory authority (Article 36).
8. Return and deletion at the end of the service
While the app is installed, the merchant can download its app data from the in-app export. When the merchant uninstalls, we delete the merchant's personal data and app data as set out in section 5 of the Privacy Policy: Shopify sessions and access tokens at once; personal data when Shopify's shop/redact request arrives or when the restore window ends, whichever comes first; and all remaining app data when the restore window ends (at most 30 days after the uninstall), unless the law requires us to keep it. At the same time we have our platform services delete the copies they hold, as section 5 of the Privacy Policy describes. Choosing Start Fresh on reinstall deletes the preserved data at once. Data in backups is deleted as those backups expire, 30 days later. The restore window concerns the merchant's data only: it does not extend, shorten or refund the subscription, which is handled through Shopify Billing.
9. Information and audits
We will make available to the merchant the information necessary to demonstrate compliance with this DPA, by answering reasonable written questions and security questionnaires, and will allow for and contribute to audits, including inspections, by the merchant or an auditor it mandates. An audit is on at least 30 days' written notice, no more than once in any 12 months (unless a supervisory authority requires it, or after a personal data breach affecting the merchant's data), during normal business hours, subject to confidentiality, and at the merchant's cost. We may first offer written answers, documents and other evidence; the audit goes ahead if they do not reasonably satisfy the merchant.
10. International transfers
Merchant data is processed in the United States, as set out in section 4 of the Privacy Policy. Where that is a restricted transfer under UK or EU law, we use a transfer safeguard that law recognises for each provider, and we will tell the merchant on request which one applies.