TrackCenter Privacy Policy

1. Introduction

Track Center (“the App”) provides shipment tracking and order management tools for Shopify merchants. This Privacy Policy describes how we collect, use, and handle information when you install and use the App.

2. Information We Collect

When you install Track Center, we access the following data through the Shopify API:

Store information: store name, domain, contact email, and configuration settings.
Order data: order details, fulfillment status, and shipping addresses.
Customer shipping data: names, addresses, tracking numbers, and carrier information associated with orders.
Product information: product titles and SKUs linked to shipments.

We do not collect or store sensitive payment information, credit card details, or customer login credentials.

3. How We Use Information

We use the information we access for the following purposes:

To generate and display shipment tracking information for merchants and their customers.
To synchronize order and fulfillment data between Shopify and carrier systems.
To provide the core functionality and features of the App.
To communicate with merchants regarding service updates, support inquiries, and account-related notices.
To improve and optimize the App's performance and user experience.

4. Data Sharing

We may share information with the following parties, strictly as necessary to provide the App's services:

Carriers and logistics providers: tracking numbers and shipment details are shared with the courier selected for each order to obtain tracking updates.
Service providers and sub-processors: infrastructure and hosting providers (e.g., cloud platforms, databases) that support the operation of the App.

We do not sell, rent, or trade personal information to third parties for marketing or advertising purposes.

5. Data Retention & Deletion

We retain information only for as long as necessary to provide the App's services and comply with legal obligations. In compliance with Shopify's GDPR requirements, the App handles the following webhook events:

customers/redact: deletes all personal data associated with a customer upon request.
shop/redact: deletes all store data upon request, typically when a merchant uninstalls the App.
customers/data_request: provides a copy of stored customer data upon request.

Merchants may request data deletion at any time by contacting us.

6. Security

We implement industry-standard security measures to protect the information we access and store, including encryption in transit (TLS), secure API authentication, and access controls. While we strive to protect your data, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Merchant & Customer Rights

Merchants and their end customers have the right to:

Request access to the personal data we hold.
Request correction of inaccurate or incomplete data.
Request deletion of personal data, subject to legal retention requirements.
Object to or restrict certain processing activities.

To exercise any of these rights, please contact us using the details below.

8. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@couriertrackingpro.com.

This Privacy Policy is a draft and has not yet been reviewed or finalized by legal counsel. It is provided as a starting point and may contain placeholders.