HaloRestock lets shoppers ask a Shopify store to email them once when an out-of-stock product is available again.
What we store for shoppers: the email address typed into the store's “Notify me” form, encrypted (AES-GCM), with the product variant, language and a random token, plus a salted hash of the address to prevent duplicates and honour deletion requests. The address itself is deleted as soon as the restock email is sent or the shopper unsubscribes; tokens and hashes are deleted 30 days later. Unconfirmed sign-ups are deleted after 30 days.
Sign-ups use double opt-in by default: only one confirmation email is sent until the shopper confirms. Every email has a one-click unsubscribe link.
Emails are sent either through HaloRestock's hosted sending or through the merchant's own email provider (Resend, Amazon SES, SMTP or Klaviyo). Hosted sending uses our subprocessor Resend (Resend, Inc., USA): the shopper's email address and the email content pass through Resend only to deliver the message, from a HaloRestock address with the store's name as sender and the store's contact email as reply-to. Merchant provider keys are encrypted at rest, never displayed again or logged, and can be deleted by the merchant at any time.
To prevent abuse we rate-limit sign-ups using keyed hashes of the IP address (when available) and of the email address; raw IP addresses are not stored. Stores may enable Cloudflare Turnstile.
For attribution we read orders (read_orders) only to check whether an order carries a HaloRestock link token, and store the order ID and the restocked item's value. We do not store customer names, addresses or other order details.
Data about merchants: shop domain, shop name and contact email (for service alerts), access tokens (encrypted), settings and sending statistics. Infrastructure: Cloudflare (Workers, D1).
Deletion: uninstalling the app immediately deletes waitlists, sending credentials and sessions; Shopify's shop/redact deletes everything else. customers/redact requests delete all entries for that email. Contact us for any other request.
2026-10-31