Privacy Policy

Last updated April 24, 2026

Your privacy is very important to us. Accordingly, Nimble Development, Inc. (“Nimble,” “we,” or “us”) has developed this Policy so that you understand how we collect, use, communicate, disclose, and otherwise make use of personal information in connection with the Shelfy service (the “Service”). If you have questions about this Privacy Policy, please contact us at support@nimbledev.com or via the contact form on nimbledev.com.

Simply put…

Shelfy is a business operations platform used by licensed manufacturers and distributors to manage orders, inventory, compliance records, and accounting integrations. We collect and use information you and your team enter into the Service for the purpose of providing the Service to you. We don’t sell your data. We don’t share it with advertisers. When we connect to third-party systems on your behalf (for example, QuickBooks Online, LeafLink, or state cannabis-tracking systems like Metrc) it is because you have authorized that connection and because it is required to deliver the functionality you asked for.

Our principles

• Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
• We will collect and use personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
• We will only retain personal information as long as necessary for the fulfillment of those purposes.
• We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
• We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.
• We will make readily available to customers information about our policies and practices relating to the management of personal information.

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

Information we collect

The information we process falls into a few broad categories:

• Account information — name, email address, company affiliation, and authentication credentials you provide when you or your administrator creates your user account.
• Business records you enter into the Service— customer contacts, orders, inventory, batches, test results, and similar operational data. You own this data; we process it on your behalf to provide the Service.
• Data synced from third-party systems you connect— for example, invoice and customer records from QuickBooks Online, orders from LeafLink, and package/tag data from state cannabis-tracking systems such as Metrc. We only receive data from these systems after you authorize the connection, and only for the scopes you approve.
• Usage and diagnostic information — server logs, IP address, browser user-agent, pages visited, and error traces. We use this to secure the Service, diagnose issues, and improve performance.

How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Authenticate users and authorize access to company-specific data;
• Synchronize records with third-party systems you’ve connected (at your direction);
• Respond to support requests and communicate with you about your account;
• Monitor and protect the security and integrity of the Service; and
• Comply with legal obligations and enforce our agreements.

We do not sell personal information. We do not use your business data to train generalized machine-learning models outside the scope of improving the Service for you.

Third-party integrations

The Service provides optional integrations with third-party systems. When you authorize one of these integrations, the third party’s own privacy policy governs data once it reaches them. Current integrations include:

• Intuit QuickBooks Online — for customer, invoice, and payment synchronization. We store the OAuth tokens needed to access your QBO company on your behalf. You can disconnect this integration at any time from the Integrations page within the Service, or from your QuickBooks Online app dashboard.
• LeafLink — for order synchronization with cannabis wholesale markets.
• Metrc — for regulatory-compliance package and tag tracking, where required by the jurisdiction in which you operate.
• Cloud infrastructure providers — Microsoft Azure (hosting, database, email delivery via Microsoft Graph).

Data retention

We retain your data for as long as your account is active, as necessary to provide the Service, or as required by law. When you terminate your account, we will delete or anonymize your data within a commercially reasonable period except where we are required to retain it to meet legal, accounting, or regulatory obligations.

Security

We employ administrative, technical, and physical safeguards designed to protect the security, confidentiality, and integrity of the data you entrust to us. These include transport-layer encryption (HTTPS), encrypted storage of secrets, access controls, and routine patching of the underlying infrastructure. No system can be guaranteed 100% secure; if you believe your account has been compromised, contact us immediately.

Your choices

You can review and correct most account and business-record information directly within the Service. If you wish to disconnect a third-party integration, revoke an authorization token, export your data, or delete your account, contact your administrator or email support@nimbledev.com.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will notify you by email or through the Service.

Contact

Questions about this Policy or our privacy practices may be directed to support@nimbledev.com, or by mail to Nimble Development, Inc., Bend, Oregon, USA.