Sutler stores the merchant's products, inventory levels, locations, suppliers, purchase orders, receipts, stocktakes and order line items (order id, date, location, channel, variant, quantity, price, discounts, refunds).
Supplier invoices the merchant uploads or forwards are processed to extract line items.
Sutler does not request, store or display customer names, emails, phone numbers or addresses.
Data is used solely to provide purchasing features to the merchant.
Shopify is the store the merchant connects. Sutler runs as an embedded Shopify app and reads the catalog, inventory, locations, and order line items described above. It does not request customer fields.
Hosting: Fly.io (US). Database: managed Postgres. Email delivery: Resend.
Supplier invoices the merchant uploads or forwards may be sent to Anthropic's API for text extraction and are not used to train models.
Data is deleted within 48 hours of the shop/redact webhook after uninstall.
Encryption at rest (managed Postgres), TLS in transit, backups encrypted by the provider, staff access limited to the founder. Incident response: notify affected merchants within 72 hours.
Contact privacy@sutler.app.