Privacy policy

Effective date: 28 October 2026

POClerk (poclerk.com) is an app for Shopify stores that turns emailed purchase orders into draft orders. It is operated by MB Croppick, company code 308104331, registered office Krivių g. 5, LT-01204 Vilnius, Lithuania ("POClerk", "we", "us"). Questions and requests: privacy@poclerk.com.

The short version

• We store your purchase-order emails and files so you can review them, and we delete the originals automatically after a retention window you control (90 days unless you change it).
• If you turn on order sheets, POClerk reads your store's recent orders from Shopify to find each customer's usual order, and emails the customers you choose their order sheet on your schedule. It keeps the sheets it sends, not your order history.
• PO content is sent to one AI provider (Anthropic) to read it. It is not used to train AI models.
• Shopify Sidekick, the assistant in your Shopify admin, can read summaries of your purchase orders from POClerk when you or your staff ask it — never the original files, the emails or anyone's email address. It is on unless you turn it off in the app's Settings.
• Everything lives on Cloudflare's platform; the database and file storage are located in Cloudflare's Eastern Europe region.
• We never sell personal data, never use buyer data for marketing, and show no ads.
• For your buyers' data we are your processor; the Data processing agreement that applies automatically on install sets out the terms.
• Uninstall the app and everything is deleted, automatically, on Shopify's standard schedule.

Who this policy covers

• Merchants — the store that installs POClerk. For your account data, we are the data controller.
• Buyers — your wholesale customers whose names and email addresses appear on purchase orders, or who receive your order sheets. For buyer data, you (the merchant) are the controller and POClerk is your processor: we handle it only to provide the service to you, on your instructions as expressed through the app. The terms of that processing are written down in our Data processing agreement, which applies automatically when you install the app.

Legal basis

Where we are the controller, we rely on these grounds under the GDPR:

• Your merchant account — store identity, contact email, settings, plan and billing status: necessary to perform our contract with you (Article 6(1)(b)).
• Usage metrics, security logs and abuse prevention — the counters in Cloudflare Analytics Engine, our audit log, sender authentication, the Turnstile check and rate limits: our legitimate interest in running a reliable, secure service (Article 6(1)(f)).
• App Store listing analytics — page views of our listing in the Shopify App Store, counted in Google Analytics: our legitimate interest in knowing how many people view the listing (Article 6(1)(f)).
• Billing records — the record of what you were charged, which reaches us through Shopify's payouts: our legal obligation to keep accounting records (Article 6(1)(c)).
• Buyer data is processed on your instructions as your processor, so the legal basis is yours to determine, not ours to state.

What we collect, why, where, and for how long

We do not collect payment card details (Shopify handles all billing) and we place no advertising or cross-site tracking cookies. The embedded app uses Shopify session tokens for sign-in; the website uses no analytics that identify you. Our listing page in the Shopify App Store (apps.shopify.com/poclerk) reports page views to Google Analytics, so we can see how many people view it; the visit-level data there is kept for 14 months, after which only aggregated counts remain. The public feedback form, and the pages on send.poclerk.com where your buyers send a PO or answer an order sheet, are protected by Cloudflare Turnstile, a privacy-preserving check that blocks automated spam.

AI processing (how POClerk reads a PO)

To extract order lines and match uncertain lines to your catalog, POClerk sends the content of each purchase order — the document text or images, plus a shortlist of candidate products from your catalog — to Anthropic (the Claude API), our AI subprocessor. An answer to an order sheet that cannot be read without it is sent the same way, with the products and quantities of the sheet it answers. Under Anthropic's commercial API terms, this data is not used to train AI models. POClerk does not train any model of its own on your data either. Anthropic states that it deletes API inputs and outputs from its systems within 30 days of receipt or generation, except where it must keep them longer to enforce its usage policy or to comply with law. We have no custom retention arrangement with Anthropic, so that standard period applies to what POClerk sends it. What the AI produced is always visible: every entered line can be inspected next to the original document, and uncertain lines are held for your review rather than acted on.

Shopify Sidekick

Sidekick is the assistant Shopify builds into your Shopify admin, and POClerk lets it answer questions about your purchase orders. When you or a member of your staff asks Sidekick about them, and approves POClerk in that conversation (Shopify asks before Sidekick uses an app), POClerk sends Shopify the answer: PO numbers (or a PO's file name when it has none), buyer names, when each PO arrived, where it stands and what it is worth, its order lines with their quantities and prices, why a line is held and the catalog item it matched, and the draft order made from it. Asked how to set POClerk up, it also sends the relevant app settings (your pack rules or retention period, for example) and counts such as how many customers are on autopilot. POClerk never sends Sidekick the original files, the email text or subject, or anyone's email address.

What Sidekick does with an answer is part of your use of Shopify, under your agreement with Shopify (Shopify's Terms of Service and Privacy Policy), like the rest of your store's data in Sidekick.

It is on unless you turn it off: Settings → Shopify Sidekick in the app. While it is off, POClerk answers every Sidekick request with a note that access is turned off, and sends no purchase-order data.

Where your data lives

POClerk runs entirely on Cloudflare's platform. The database (Cloudflare D1) and file storage (Cloudflare R2) that hold the data above are located in Cloudflare's Eastern Europe region (verified 21 July 2026). Requests are processed by Cloudflare's global edge network in transit, as with any Cloudflare-hosted service. Inbound PO email is received by Cloudflare Email Routing at your store's dedicated address on in.poclerk.com; confirmation replies and order sheets are sent through Cloudflare Email Sending from mail.poclerk.com, which also tells us when one bounces or is marked as spam.

Who we share data with (subprocessors)

That is the whole list. We do not sell personal data, share it with data brokers or advertisers, or use buyer data for any marketing.

Changes to this list. Before a new subprocessor starts processing merchant or buyer data, we update this table and give this policy a new effective date, giving you the opportunity to object. If you object, you can uninstall before the change takes effect, and the deletion described below applies.

How long we keep data (summary)

• Raw PO files (emails, attachments, uploads): deleted automatically by a nightly job once older than your retention setting — default 90 days, adjustable 7–365 days. The machine-readable extraction we derived from a file is deleted together with it.
• Entered order lines: the line-by-line detail of a PO (quantities, item codes, prices, match results, review notes) is deleted automatically 24 months after the PO arrived. The order itself stays reviewable — buyer, PO number, line counts, order value and the draft-order reference remain — so your order history keeps its summary while the line-level detail ages out.
• Buyer redaction: on a customer data-erasure request relayed by Shopify, we delete that buyer's identity records, learned aliases, their documents' identifying fields, all their raw files, and their order sheets.
• Uninstalling: uninstalling revokes our access token immediately. Shopify sends the shop-deletion signal about 48 hours later, and on it we delete everything — all files and every database record for the store. Draft orders already created live in your Shopify store and are yours.
• Restore history: our database (Cloudflare D1) keeps an automatic restore history of the whole database for 30 days. A record we delete — on uninstall, on a buyer redaction, or when its retention period ends — leaves the live database at once and drops out of that history within 30 days. We use it only to recover the service from a failure, never to look up individual records, and if we ever restore it, we repeat every erasure and scheduled deletion made since the restore point.

Your rights

Merchants can access and change their data in the app (settings, aliases, buyers, documents) or write to privacy@poclerk.com to access, correct, export, or delete anything, or to object to or restrict processing. If you are in the EU/EEA or UK, you also have the right to complain to a supervisory authority. Our lead supervisory authority is the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos g. 17, LT-10312 Vilnius, vdai.lrv.lt — or you can complain to the authority in your own EU/EEA/UK country.

Buyers should direct requests to the merchant they ordered from — the merchant is the controller of buyer data. POClerk supports the merchant's obligations automatically through Shopify's mandatory privacy webhooks:

• customers/data_request — logged and surfaced so the merchant can provide the buyer's data; we assist on request.
• customers/redact — the buyer's personal data is erased as described above.
• shop/redact — the store's complete data is erased after uninstall.

Security

• Shopify access tokens are stored encrypted (AES-GCM) and never leave the server side.
• All traffic is TLS; webhooks are verified with Shopify's HMAC signatures before anything is processed.
• Inbound email is checked against sender authentication (DMARC); by default, mail that fails authentication for your address is rejected.
• Files are stored under per-store keys and served only through authenticated, signed URLs.
• The app requests only the Shopify permissions it needs — access to your orders only when you set up order sheets — and holds Shopify's protected customer data approval for the customer fields it uses (name and email), used solely to enter and review orders and to build and send the order sheets you set up.

International transfers

Primary storage is in Cloudflare's Eastern Europe region. Anthropic is a US provider; transfers to it are covered by a data-processing agreement that incorporates the EU standard contractual clauses. Cloudflare processing is covered by Cloudflare's data-processing addendum. Our support and privacy mailboxes are hosted by Google (Gmail), a US provider; Google LLC is certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. DPF.

Children

POClerk is a business tool for merchants and is not directed at children.

Changes to this policy

If this policy changes materially, we will note it here with a new effective date and say what changed.

• 28 October 2026. Weekly order sheets: what POClerk reads from your Shopify orders and what it keeps, for how long, and that an answer it cannot read without help goes to our AI provider with the sheet it answers. The pages on send.poclerk.com, where your buyers send a PO or answer a sheet, are named too.

Contact

privacy@poclerk.com — or support@poclerk.com for anything else.