Shopify data and privacy
What customer data RouteOne uses from your Shopify store, why, how it is protected, and how deletion requests are handled.
When you connect Shopify, your orders carry information about your customers. This page explains in plain words what we use, what we keep and how privacy requests are handled. It is a summary; our Privacy Policy is the full statement.
What we use and why
From each order we read your customer's name, phone, email and delivery address, plus the items, quantities, prices and the order total. We use them only to run your shipping:
- to print the courier label and deliver the parcel,
- to contact your customer about their delivery,
- to calculate shipping charges and handle COD.
We share the details a courier needs to deliver with your courier partner(s). We do not sell personal data.
What permissions the app asks for
RouteOneX asks Shopify for access to your orders and fulfilments: reading and updating them. This lets us import orders and create fulfillments with tracking. It does not ask for anything unrelated to shipping.
How data is protected
- Your store's access token and other secrets are stored encrypted.
- All traffic is sent over a secure connection.
- When customer data is viewed, exported or redacted, the action is recorded in an access log.
- Team members only see what their role allows. See Users and roles.
Privacy requests from Shopify
Shopify can send three kinds of privacy requests on behalf of you or your customers. RouteOne receives and processes them automatically, and each one is recorded.
| Request | What we do |
|---|---|
| Customer data request | We gather the customer's order data held in RouteOne into an export, available to you to download. |
| Customer erasure | We remove that customer's personal details from their orders. |
| Store erasure (after uninstalling) | We remove personal details of your customers from that store's orders. |
When we remove personal data, names, phone numbers, emails and address lines are replaced or cleared, and the saved copy of the original order from Shopify is cleared. Messages sent to customers are also cleared of recipient details and body.
Keeping data only as long as needed
Personal details on old, finished Shopify orders are scrubbed automatically after a set retention period. Orders that are still in transit are not touched. Exported customer data is also cleared from our system some weeks after the request is completed.
What you can do
- Disconnect the store any time under Settings › Sales Channels, or uninstall the app in Shopify. Syncing stops.
- Ask us to delete or export your account data by raising a ticket under Help Center › Ticket, or by writing to the support contact in our Privacy Policy.
- Only share order and shipping details with people on your team who need them.
Back to Install RouteOneX on Shopify or read How Shopify orders sync.
Related guides
Common questions
Still need help? Email support@routeone.app with your order ID or AWB, or raise a ticket from Help Center › Ticket in the app.