Hosting and data protection at Stockaro

Stockaro is a warehouse management system (WMS) built as a Shopify app. It is developed and supported by Manuel Heithus in Harsewinkel, Germany. This page summarises where data is stored and who processes it.

Where is the data stored

The application and database run at Railway in the EU-West region (Amsterdam, the Netherlands). The data therefore stays inside the EU/EEA. The hosting itself involves no transfer to third countries.

Which data does Stockaro process

Stockaro processes product, stock and order data from Shopify. On orders this includes the customer name for pick lists and packing, and the delivery address solely for the packing slip. Stockaro does not process end customers' email addresses, phone numbers, billing addresses or payment data.

Data processing agreement

On request we provide a data processing agreement (DPA) under Art. 28 GDPR. You can view the public version in advance: https://web-production-215e6.up.railway.app/avv. The list of sub-processors at https://web-production-215e6.up.railway.app/subprocessors and the technical and organisational measures at https://web-production-215e6.up.railway.app/toms are also publicly available.

Sub-processors

• Railway: hosting of application and database, EU-West (Amsterdam).
• Resend (USA): sending of transactional emails, based on EU standard contractual clauses.
• Shopify is a data source, not a sub-processor.

Support and language

Stockaro is available in German and English. Support replies in German, and in English on request: info@stockaro.de.

Cancellation and data export

All plans can be cancelled monthly. Items and stock can be exported as CSV at any time.

In short

• Stockaro is developed and supported in Germany.
• The application and database run at Railway in the EU-West region (Amsterdam).
• Hosting takes place inside the EU/EEA, without transfer to third countries.
• A data processing agreement under Art. 28 GDPR exists with every merchant, and its public version can be viewed.
• Stockaro can be cancelled monthly, and data can be exported as CSV at any time.

Last updated: October 2026