Privacy policy

• Accounts. The names and email addresses of people who sign in to the portal, and their passwords, which we keep only as a one-way hash.
• Merchants’ business information. Company details, the products and shipments merchants send us, the prices and costs they give us, and billing details. Card and bank payments are handled by Stripe; we never see or store full card or account numbers.
• From a connected Shopify store. The store’s name and settings, its products, inventory and locations, and its orders, including each shopper’s name, shipping address, email address and phone number, and what they ordered.
• From a connected Amazon seller account. Listings, catalog details, stock levels, prices and fees, and inbound shipments.
• Warehouse records. What arrived, how it was counted and checked, photos of damaged or mismatched items, and what was packed and shipped.
• Technical data. A cookie that keeps you signed in, and server logs of requests, kept to run the portal securely.

We use this information only to provide our services to merchants:

• to receive, store, prep, pack and ship their goods;
• to buy shipping labels and give carriers what they need to deliver an order;
• to send fulfillment and tracking details back to the merchant’s Shopify store, and stock levels when the merchant turns that on;
• to create and manage the Amazon listings and shipments a merchant asks for;
• to bill merchants for our services;
• to keep the portal secure, fix problems and answer questions.

We don’t sell personal information, and we don’t use shoppers’ information for marketing or advertising.

Only those who need it to do the work above:

• Shipping carriers and our label provider, Shippo, which receive the recipient’s name, address and phone number to deliver a parcel.
• Shopify and Amazon, when we act on a merchant’s store or seller account at their request.
• Stripe, to take merchants’ payments.
• The providers that host the portal and its database, which store data for us and may not use it for anything else.
• Authorities, when the law requires it, and anyone who buys our business, who would be bound by this policy.

If you bought from a store that uses Orderfy, the store decides how your information is used, and we handle it on the store’s behalf to ship your order. For questions or requests about your information, contact the store. You can also write to us.

• Information travels over encrypted connections.
• The keys that give us access to merchants’ Shopify stores and Amazon accounts are encrypted in our database, and passwords are hashed.
• Our database provider encrypts stored data and backups.
• Only Orderfy’s staff can sign in to see all merchants’ information; each merchant’s own users see only theirs.

We keep a merchant’s records while we provide services to them, and afterwards for as long as we need them for billing, tax, accounting and settling questions about shipments.

When a merchant disconnects their Shopify store or uninstalls our app, we delete our access to it at once.

When a shopper asks a store to erase their information, Shopify passes the request to us, and we erase their name, email, phone and street address from their orders. We keep only the record of the shipment: what was sent, when, what it cost, and the state and country it went to. Two days after a store uninstalls our app, we do the same for all of its orders.

A merchant can also ask us directly to delete their information, or a shopper’s, and we will, unless the law requires us to keep it.

You can ask us what information we hold about you, and ask us to correct or delete it, by writing to us. Depending on where you live, privacy law may give you other rights, and we will honor them. Our services are for businesses, and we don’t knowingly collect information from children under 13.

If we change this policy, we’ll update it here and change the date at the top. We’ll tell merchants before a significant change takes effect.