ShipRules privacy policy

What this policy covers

ShipRules is a Shopify app for merchants. It finds unfulfilled orders from the same customer going to the same shipping address and merges them into one shipment, either automatically or after you approve each merge. This policy describes what data the app reads from your store, what it keeps, who else handles it, and how to have it deleted.

The app is used by merchants only. It never contacts your customers, sets no cookies on your storefront, and has no analytics or tracking of any kind.

What the app reads from your store

Through Shopify's Admin API, using the access scopes you grant when you install it, the app reads your open, unfulfilled orders. For each order it reads:

• the order id and order number, when it was placed, its tags, and its payment and fulfillment status;
• the customer id — an identifier only, not the customer's name or contact details;
• the shipping address;
• the line items (title, quantity, variant id and unit price) and the shipping charge.

This is the minimum needed to tell that two orders are duplicates — same customer, same shipping address, placed within your merge window — and, when a merge runs, to move the line items onto one order, refund the duplicate shipping charge on the other, and cancel it.

What the app stores

The app keeps the following in its own database:

• Your store's myshopify.com domain and the offline access token Shopify issues so the app can act on your store.
• The name, email address and locale of the staff member who installed the app, as recorded by Shopify's app framework when they signed in.
• Your merge rules: approval mode, time window and excluded tags.
• For every merge attempt, and every undo: the order ids involved, the line-item titles, quantities and variant ids that were moved, shipping amounts and refund amounts, the outcome (success, or the reason it failed), and when it happened.

This merge history is what the app's audit log shows you and what undo relies on.

What the app never stores

Customer names, email addresses, phone numbers, shipping and billing addresses, and customer ids are never written to the app's database or its logs. They are read only to find merge candidates and are discarded once the request completes.

The app does not sell or share data, and does not use it for advertising, marketing, analytics or profiling.

Why the app uses this data

Solely to detect duplicate orders, merge them when your rules or your approval say so, show you the merge queue and audit log, and undo a merge if you ask it to. There is no other use.

Who else handles this data

Two providers process data on the app's behalf:

• Shopify — the platform your store runs on. All order data originates there, the app reads and edits orders through Shopify's Admin API, and app billing is handled by Shopify.
• Cloudflare — hosts the app and its database. Data is encrypted in transit (HTTPS) and at rest.

No other third party receives data from the app.

How long data is kept

While the app is installed, your merge rules are kept, and your merge history is kept for 24 months so you can review, explain and undo merges.

When you uninstall the app, Shopify notifies it and the app immediately deletes everything it holds for your store: the access token, your settings and your merge history. 48 hours after uninstall Shopify also sends the app a shop/redact request, and the app runs the same deletion again so nothing is left behind. Reinstalling starts from a clean slate.

Merge history has a retention period of 24 months: each merge record, with any undo of it, is deleted automatically 24 months after the merge, or after the undo if that came later. A daily job does this for every store. You can also ask for it to be deleted sooner (see below).

How data is protected

All traffic between your browser, Shopify and the app uses HTTPS, and the database is encrypted at rest by the hosting provider. The access token is only ever used on the server and is never sent to the browser. Access to the production database is limited to the app's operator.

Your rights and how to request deletion

You can ask at any time for a copy of the data the app holds for your store, or for it to be deleted. Email info@andrewtechful.com from your store's owner or staff address so the request can be verified; we aim to answer within one business day and to complete a deletion within 30 days. Uninstalling the app also triggers the deletion described above.

If one of your customers asks you for their data or for its erasure, Shopify forwards the request to the app (the customers/data_request and customers/redact webhooks). Because the app stores no customer personal data, there is nothing to return or delete on its side; your own Shopify records remain the source.

Depending on where you and your customers are, you may have legal rights — for example under the GDPR or the CCPA — to access, correct, delete or restrict the use of personal data. Contact us to exercise them.

Changes to this policy

This policy took effect on September 23, 2026. If it changes, the updated version is published at this address with a new effective date.

Contact

Questions about this policy, or a deletion request: info@andrewtechful.com