Privacy policy

Who we are

Stray Anchor Purchase Orders is a Shopify app made by Stray Anchor Pty Ltd (ABN 22 700 917 111), Perth, Western Australia. It helps stores send purchase orders to their suppliers, collect suppliers' answers, chase late orders and print labels.

What we collect, and why

• Your store's details from Shopify: name, contact email, address, currency and time zone, to put on purchase orders and emails.
• Purchase orders you create in Shopify (items, quantities, costs, delivery location), read when you open or send them. We keep a copy of each order as it was sent, so your supplier sees exactly what they were sent.
• Suppliers' contact details you enter: email addresses, contact name, ABN and notes.
• Suppliers' answers: what they submit on the confirm page and the emails they send in reply to a purchase order.
• ABNs you enter for your store and suppliers are checked with the Australian Business Register. We keep its answer (registered name, status and GST registration) for up to 30 days.
• Misuse protection: which staff account sent or chased each order, reports suppliers make about orders they weren't expecting, and addresses that asked not to be emailed. We use these only to stop fake or unwanted purchase orders.
• Products' names, prices, barcodes and SKUs, read when you print labels. We don't store them.

We don't access or store information about your customers or their orders.

Reading suppliers' replies with AI

When a supplier replies by email, we send the reply and the purchase order it answers to Anthropic's Claude API to pull out dates, quantities and price changes for you to review. Nothing is applied to your orders until you approve it. Anthropic does not train its models on data sent through its API, and neither do we.

Who processes data for us

• Shopify, where your store and purchase orders live.
• Microsoft Azure (Australia), which hosts the app and its database.
• Amazon Web Services SES (Sydney), which sends our emails.
• Cloudflare, which receives suppliers' email replies.
• Anthropic, which reads suppliers' replies as described above.

How long we keep it

The original copies of suppliers' emails are deleted after 30 days; what we read from them stays with the order. When you uninstall Stray Anchor Purchase Orders, Shopify tells us 48 hours later and we delete everything we hold for your store. The one exception: if we paused a store's sending because of misuse, we keep a note of that (the store's .myshopify.com address, its ABN and the reason) so reinstalling doesn't clear it.

Your choices

You can remove a supplier's details at any time. To ask what we hold, or to have it deleted sooner, email hello@strayanchor.com.au.