Privacy policy
What the Ship Together app reads, what it keeps, for how long, and who can see it.
What the app reads
When a store installs the app, it reads orders, customer IDs, customer names and shipping addresses through Shopify’s API. It uses them for these purposes only: finding orders that can be merged; creating the merged order group, which puts the later orders on hold until you confirm that they ship together; showing the merged packing slip, which prints the recipient’s name and address; and checking, before the packing slip and before you confirm, that the orders in a group still go to the same address, so nothing is marked as shipped on out-of-date information. The app does not create new Shopify orders and does not change amounts.
What the app stores
- Your shop’s domain, and the access tokens Shopify gives the app (the tokens are encrypted).
- Order IDs and order numbers.
- Merge records (group IDs, hold IDs and status), so a merge can be searched and undone.
- Your settings.
- When Shopify sends a customer data request for a customer of your shop, the order numbers named in it, so you can answer the customer from the app’s Settings page. It contains no names, email addresses or shipping addresses. It is deleted 30 days after the request once you have marked it done, and in any case 90 days after the request.
- Which plan the shop is on (Free or Standard) and when Shopify last confirmed it.
- An access log: each time the app reads customer names or addresses, it records when, why and for how many orders. The log contains no names or addresses and is kept for 90 days.
The app does not keep customer IDs, names, email addresses or shipping addresses after it has used them.
How long we keep it
When the app is uninstalled, its access token and the stored plan are deleted at once; if the app cannot confirm the uninstall event, they are deleted at the latest about 48 hours later, together with the shop/redact request. All other data for the shop (order IDs, order numbers, merge records and settings) is deleted when Shopify sends the shop/redact request, about 48 hours after the app is uninstalled. If Shopify sends customers/redact for a customer, the merge records that involve that customer’s orders are deleted once they are finished, and at the latest 30 days after the request (the app then tries to release its holds on those orders and remove its tags, and the merge is marked as not finished until that works; if that still fails after 29 days, it deletes the records anyway and the hold stays visible in Shopify). A privacy request that reaches the app after the shop’s data was deleted can leave a short record without personal data (a count in the access log, or the order numbers of a data request); it is deleted automatically after 90 days, or after 30 days if it is a data request you have marked done. The app also responds to Shopify’s mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact.
Which plan you are on
To tell whether a shop is on the Free or the Standard plan, the app asks Shopify’s Partner API for the shop’s subscription. The request carries only the app’s ID and the shop’s ID, and the answer is only the name of the plan. No customer data is sent or returned. The app keeps the answer in memory for a few minutes and stores the last confirmed plan, which is used for up to 72 hours if Shopify cannot be reached.
Who can see it
Only TiField, the developer of the app. We do not sell the data, we do not share it with third parties other than the hosting provider named below and Shopify itself, and we do not use it to train AI models.
Where it is hosted
On one server at Amazon Web Services (AWS Lightsail) in the us-east-1 region, in the United States. The database is on an attached disk that AWS encrypts at rest. Access tokens are also encrypted before they are stored, and all connections use HTTPS.
This website
This page has no forms, cookies or analytics. Like any web host, the hosting provider processes technical connection information, such as your IP address, to deliver pages.
Contact
Questions about privacy or support: support@tifield.com.
Changes
If this policy changes, we will update this page and the date above. Back to the Ship Together overview.