Privacy policy
How we handle merchant information, supplier invoices and support requests.
Last updated November 12, 2026
Who handles your information
1001800664 ONTARIO INC. operates SupplierCheck under the Valent Advisory developer brand. This policy covers our embedded Shopify app, this website and enquiries sent to our support address.
Installation and Shopify records
We use Shopify authentication to identify the shop and authorize read access. Our Railway database in the United States stores the shop domain, granted permissions, session identifiers, authorization state, tokens and applicable expiry dates. Depending on the Shopify session, it can also contain staff ID, name, email, language, account-owner, collaborator and verification flags. We use these records to provide and secure access.
Purchase orders and receipts
When you sync, our server reads purchase orders, supplier names, item names and SKUs, prices, currencies, quantities and related transfer and shipment records. It sends these to your embedded app for comparison. The service processes them during the request and the open browser session. Its database has no purchase order or receipt history.
Invoices, results and downloads
Your browser reads the files you select, including any extra columns. Invoice contents, field mappings, duplicate checks and results stay in the open page. Reloading or closing it clears the working batch. Your original files and downloaded exception reports remain under your control. You decide whether to share them.
Hosting, diagnostics and support
Shopify provides authentication and the admin interface. Railway hosts our application and database in the United States. Infrastructure providers process connection information such as IP address, browser, request path, time and status for delivery and diagnostics. Application diagnostics may identify the shop. Our static website has no analytics scripts or contact forms. If you email us, we and our email provider process your address, message and any attachments to handle your request. Please omit credentials and full invoices.
Retention and deletion
Shopify sends signed notifications when a shop uninstalls or requests deletion. After verification we remove that shop’s session records. Token expiry alone does not erase them. Our recovery utility excludes merchant sessions before encrypting an archive. Infrastructure logs, any provider snapshots and support correspondence have separate lifecycles. Uninstalling does not erase a report on your device or an email you sent us. We retain support correspondence as needed to resolve requests and meet applicable legal obligations.
Privacy requests
To ask about access, correction or deletion, email matt@valentadvisory.ca with your shop domain and the nature of the request. We may verify your authority before responding. Shoppers should contact the merchant for requests about their store records. We acknowledge Shopify customer privacy notifications and have no stored shopper profiles to return or erase. You may also contact your applicable privacy regulator.