Privacy policy

Who we are

Zealand Labs, Kinavej 1, 4200 Slagelse, Denmark. Company registration (CVR): 46812980. Email: info@zealandlabs.com.

For data processed in our apps, the merchant who installs the app is the data controller, and Zealand Labs is the data processor acting on their instructions. For this website, we are the controller.

The short version

• Our apps read data from your Shopify store. They never write to it.
• We store aggregated numbers — totals per sales channel, per variant, per day — not your customers' personal data.
• We do not sell data, and we do not share it for advertising.
• When you uninstall an app, we delete the store's data — Wetza straight away, Tidva within 48 hours.

The apps

What the apps read from Shopify

Each app asks for the narrowest set of Shopify permissions that lets it do its job, and we add a permission only when the feature that needs it is actually built.

• Wetza reads orders (read_orders) to calculate revenue, order count and share per sales channel.
• Tidva reads products, inventory, orders and locations (read_products, read_inventory, read_orders, read_all_orders, read_locations) to calculate sales per day, days of cover and suggested reorder quantities. read_all_orders lets it see the last 90 days of orders instead of 60.

Orders contain personal data about your customers inside Shopify. Our apps read them in order to count and sum them — they do not copy names, addresses, email addresses or payment details into our database.

What we store

• Your store's domain, its Shopify access token, plan, language and currency, and the settings you enter in the app — for example channel fee percentages in Wetza, or supplier lead times in Tidva.
• In Tidva, the suppliers you add — name, the email address you give for orders, lead time and terms — and, if you set one, the address purchase-order emails go to. This is your business contacts' data, entered by you, and used only to fill in your purchase orders.
• Aggregated figures derived from your orders and inventory: totals per channel and per period in Wetza; units sold per variant per day, stock levels and purchase orders in Tidva.
• Ordinary server logs (IP address, timestamp, requested URL), kept for security and troubleshooting.

We do not store your customers' names, addresses, email addresses, phone numbers or payment information.

Where it is stored

Our apps, their databases and this website run on servers in Germany, operated by Sliplane (sliplane.io) on our behalf. Sliplane acts as a sub-processor and may access data only to operate the service. Shopify itself remains the source of the data and processes it under its own terms.

How long we keep it

For as long as the app is installed. When you uninstall, Shopify notifies the app and we delete the store's records — settings, cached aggregates, suppliers, purchase orders and access token. Wetza deletes them straight away. Tidva removes the access token straight away and the rest 48 hours later, when Shopify sends shop/redact: a store that reinstalls within those two days gets its history back instead of starting from nothing. Server logs are kept for a short period and then rotated out.

We also implement Shopify's mandatory privacy webhooks (customers/data_request, customers/redact and shop/redact). Because we do not store customer records, a customer data request returns no customer data from us.

Billing

Subscriptions run through Shopify's Billing API. Shopify handles the payment and holds the payment details — we never see your card information. We store which plan a store is on and whether it has used its free trial.

Email

Our apps send no email. Tidva's “Send by email” button opens a new message in your own mail program, filled in with the purchase order; it is sent from your account, by you, and never passes through our servers.

This website

The site sets no cookies and runs no analytics, tracking pixels or advertising scripts.

Everything the site loads — the stylesheet, the web font, the images — is served from our own domain. Your browser makes no requests to third parties while reading these pages, so nobody else learns your IP address because you visited us.

Our hosting provider keeps standard access logs for the website.

When you email us

If you write to us, we receive your email address, your name if your mail program sends it, and what you write. We use it to answer you and nothing else — no newsletter, no profiling, no passing it on. Our mailbox is hosted by Microsoft 365, and messages are kept there for as long as they are useful for support history.

Your rights

Under the GDPR you may ask for access to the personal data we hold about you, and for it to be corrected or deleted. Write to info@zealandlabs.com and we will answer within 30 days.

If you are a customer of a store that uses one of our apps, the store is your point of contact — they are the controller of that data. We will help them respond.

You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

Changes

If we change what we collect or why, we update this page and the date below. Material changes to how an app handles data are also noted in the app's listing.

Last updated: 2 October 2026. Questions about anything on this page: info@zealandlabs.com.