Privacy Policy

Last updated: {{LAST_UPDATED}}

1. Introduction

Carrier Label Router (“the App”) provides carrier label generation and routing tools for Shopify merchants. This Privacy Policy describes how we collect, use, and handle information when you install and use the App.

2. Information We Collect

When you install Carrier Label Router, we access the following data through the Shopify API:

• Store information: store name, domain, contact email, and configuration settings.
• Order data: order details, fulfillment status, shipping addresses, and package specifications.
• Customer shipping data: names, addresses, and carrier preferences associated with orders.
• Product information: product titles, SKUs, and weights linked to shipments.
• Routing rule configurations: carrier and module assignments defined by merchants.

We do not collect or store sensitive payment information, credit card details, or customer login credentials.

3. How We Use Information

We use the information we access for the following purposes:

• To generate shipping labels and route them to the appropriate carriers based on merchant-defined rules.
• To synchronize order and fulfillment data between Shopify and carrier systems.
• To provide the core label generation and carrier routing functionality of the App.
• To communicate with merchants regarding service updates, support inquiries, and account-related notices.
• To improve and optimize the App's performance and user experience.

4. Data Sharing

We may share information with the following parties, strictly as necessary to provide the App's services:

• Carriers and logistics providers: shipment details are shared with the courier selected by routing rules to generate labels and fulfill orders.
• Service providers and sub-processors: infrastructure and hosting providers (e.g., cloud platforms, databases) that support the operation of the App.

We do not sell, rent, or trade personal information to third parties for marketing or advertising purposes.

5. Data Retention & Deletion

We retain information only for as long as necessary to provide the App's services and comply with legal obligations. In compliance with Shopify's GDPR requirements, the App handles the following webhook events:

• customers/redact: deletes all personal data associated with a customer upon request.
• shop/redact: deletes all store data upon request, typically when a merchant uninstalls the App.
• customers/data_request: provides a copy of stored customer data upon request.

Merchants may request data deletion at any time by contacting us.

6. Security

We implement industry-standard security measures to protect the information we access and store, including encryption in transit (TLS), secure API authentication, and access controls. While we strive to protect your data, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Merchant & Customer Rights

Merchants and their end customers have the right to:

• Request access to the personal data we hold.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data, subject to legal retention requirements.
• Object to or restrict certain processing activities.

To exercise any of these rights, please contact us using the details below.

8. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@couriertrackingpro.com.

This Privacy Policy is a draft and has not yet been reviewed or finalized by legal counsel. It is provided as a starting point and may contain placeholders.