Privacy Policy

Shopify API data

Order Fulfillment Buddy processes the Shopify store, order, product, location, and fulfillment order data needed to route fulfillment work to the merchant's configured Slack channels and Google Sheets tabs.

The app uses the Shopify Admin API for this data. It does not intentionally store customer email, phone, billing address, shipping address, or payment data unless the product changes to require it.

Merchant-provided data

Merchants provide fulfillment location mappings, Slack channel selections, Google spreadsheet and tab selections, routing settings, and support details when they contact us. The app also generates operational logs for webhook delivery, routing jobs, retries, mapping issues, and support investigations.

Customer tracking

The app does not drop storefront cookies, run storefront pixels, or track how buyers browse a merchant's Online Store. It processes customer-related order and fulfillment data only when that data is included in Shopify records needed to route fulfillment work.

Connected services

Merchants can connect Slack and Google Sheets. The app stores integration identifiers and tokens needed to post Slack messages and write Google Sheets rows for the merchant's fulfillment workflows.

How information is used

• Route fulfillment orders to mapped locations and teams.
• Write operational updates to Slack and Google Sheets.
• Track routing jobs, retryable failures, and mapping issues.
• Maintain app security, support, and audit records.

Subprocessors

Order Fulfillment Buddy uses Shopify for app installation, embedded app access, and billing; Supabase for Postgres database hosting and job storage; Slack for merchant-selected notifications; and Google Sheets for merchant-selected spreadsheet updates. These services may process data outside of your country depending on their infrastructure and the merchant's account settings.

Retention and deletion

Operational records are kept only as long as needed to provide, support, secure, and audit the app. Integration tokens and routing settings are retained while the app is installed or while needed to complete support, security, or legal obligations. Shopify privacy webhooks for customers/data_request, customers/redact, and shop/redact are handled by the production app so merchant and customer data requests can be processed.

Data rights

Merchants or authorized requestors can contact us to request access, correction, deletion, or restriction of personal data processed by the app. We may need to verify the request and coordinate with the merchant or Shopify before completing it.

Contact

For privacy questions or data requests, contact support@tavulabs.com.