Privacy policy

Who we are

Order Tracking is built and operated by Temp and Major Inc. (“we”). This policy explains what the app does with information when a Shopify merchant installs it.

What the app reads from Shopify

• Orders and fulfillments, including tracking numbers, carriers and the customer's email address (read_orders, read_fulfillments)
• Lookups from your storefront tracking page, where a shopper enters an order number and email (write_app_proxy)

What the app stores

• For each shipment: the order number, tracking number, carrier, status and delivery dates
• Daily counts of tracking page lookups
• Your tracking page and delay alert settings
• Hashed request counters used to block abuse (no IP addresses or emails are stored in them)
• Your store's domain and a Shopify access token

How we use it

Only to provide the app's features to the merchant who installed it. We don't sell information, use it for advertising, or combine it across stores.

Who processes it

Information is processed by these service providers on our behalf:

• Shopify, which hosts the store and runs the app inside the Shopify admin
• Vercel, which hosts the app's servers (United States)
• Supabase, which hosts the app's database (United States)
• Resend, which delivers the app's emails (United States)

Retention and deletion

When a store uninstalls the app, we delete its login sessions right away and all of its other data when Shopify sends the shop data deletion request, 48 hours after uninstall. When Shopify asks us to delete or report a customer's data, we do so within 5 days.

Your rights

Shoppers can ask the store they bought from to access, correct or delete their data; the store passes those requests to us through Shopify. Merchants can contact us directly at any time.

Contact

Email support@ottokode.com. We'll update this page if anything changes and show the new effective date below.