Privacy Policy

1. Introduction

This Privacy Policy applies specifically to the TrackingMania Dropship Tracker Shopify app (the “App”) provided by TrackingMania (“we,” “our,” or “us”). It explains how we collect, use, store, share, and protect information when a Shopify merchant installs and uses the App, including information about the merchant's customers that is processed to provide order tracking and shipping notification services.

2. Information We Collect

2.1 Merchant information

When you install the App, Shopify provides us with information about you and your store, including:

• Store name, shop domain (myshopify.com), store email, country, currency, and timezone
• Merchant contact name and email address
• App configuration, preferences, branding settings, and billing status
• OAuth access tokens issued by Shopify for the scopes granted at install time

2.2 Customer and order information

To provide tracking pages and shipment notifications, we access and store order-related data the merchant has authorized us to read from Shopify, including:

• Customer name, email address, and shipping address
• Order details: order number, line items, prices, fulfillment status
• Tracking information: carrier name, tracking number, tracking events
• Email open/click and unsubscribe state for notifications sent by the App

2.3 Automatically collected information

• Server logs (IP address, user agent, request paths) for security and debugging
• App usage metrics required to operate and improve the service

3. How We Use the Information

• Provide and operate the App's order tracking and notification features
• Send automated email notifications to the merchant's customers about their order status
• Display branded tracking pages to the merchant's customers
• Process billing through Shopify and respond to merchant support requests
• Maintain security, prevent abuse, and comply with legal obligations and Shopify's requirements

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process personal data on the following bases:

• Contractual necessity: processing required to provide the App to the merchant
• Legitimate interest: operating, securing, and improving the App
• Legal obligation: tax, accounting, and regulatory requirements

With respect to a merchant's customers, the merchant is the data controller and TrackingMania acts as a data processor on the merchant's behalf.

5. Sharing and Disclosure

We do not sell or rent personal information. We share data only with:

• Shopify: as required to operate as an app on the Shopify platform
• Shipping carriers / tracking aggregators: to retrieve real-time tracking updates
• Infrastructure providers: cloud hosting (AWS), database, and email delivery providers under written data-processing agreements
• Law enforcement / regulators: when required by valid legal process

6. Data Retention

We retain merchant and customer data for as long as the App is installed and active on the merchant's store. In accordance with Shopify's App Store requirements, when the App is uninstalled we:

• Honor the shop/redact webhook by deleting merchant data within 30 days
• Honor the customers/redact webhook by deleting the specified customer's personal data within 30 days
• Honor the customers/data_request webhook by forwarding the request to the merchant

Backups and system logs are purged on a rolling basis according to our internal retention schedule.

7. Data Security

We apply industry-standard technical and organizational measures to protect data: encryption in transit (HTTPS/TLS), encrypted storage, scoped OAuth access tokens, principle-of-least-privilege access controls, and regular dependency and vulnerability scanning. No transmission or storage system is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Data may be processed in jurisdictions outside the merchant's country, including the United States. Where data is transferred out of the European Economic Area, the United Kingdom, or other regulated regions, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Your Rights

Merchants and customers may have the right to access, correct, delete, restrict, or port their personal data, and to object to certain processing. Customers should direct requests to the merchant that operates the store; merchants may contact us directly using the address below. We respond to verified requests within the timeframes required by applicable law.

10. Children's Privacy

The App is not directed to children under 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date above and, where appropriate, by notifying merchants through the App.

12. Contact Us

For any question about this Policy or to exercise a privacy right, contact us at: