1. Introduction
ShipVueue ("we", "our", or "us") is a Shopify app that provides live shipment visualization and analytics for Shopify merchants. This Privacy Policy explains what data we access, how we use it, and how we protect it.
By installing or using ShipVueue you agree to the practices described in this policy.
2. What We Collect
When you install ShipVueue, we access the following data from your Shopify store via the Shopify API:
- Order data — order IDs, status, fulfillment status, shipping addresses, and order values
- Customer data — names and shipping location information associated with orders
- Shop data — your store domain and basic store information used for authentication
We do not collect payment card numbers, passwords, or any data beyond what is required to operate the app.
3. How We Use Your Data
We use the data collected solely to provide ShipVueue's features:
- Plotting shipments on the live interactive map
- Displaying analytics — revenue, customer LTV, repeat buyer rates, and heat maps
- Powering the social proof embed on your storefront
- Showing the Live Mode dashboard
We do not sell, rent, or share your data with third parties for marketing or any other purposes.
4. Data Storage
- Your store's OAuth access token and shop domain are stored securely in an encrypted database hosted on Railway (railway.app)
- Order and customer data is fetched directly from the Shopify API on demand and is not permanently stored on our servers
- All data is transmitted over HTTPS at all times
5. Third-Party Services
- Railway — application hosting and database storage (railway.app)
- CartoDB / OpenStreetMap — map tile rendering for the visual map; no user or customer data is sent to these services
- Leaflet.js — open-source map rendering library, runs entirely in the browser
None of these services receive your customers' personally identifiable information.
6. Data Retention & Deletion
- We retain your shop's authentication credentials for as long as ShipVueue is installed on your store
- When you uninstall the app, we delete your shop's stored data within 30 days in accordance with Shopify's GDPR compliance requirements
- You may also contact us at any time to request immediate deletion of your data
7. GDPR & Merchant Rights
If you are located in the European Economic Area, you have the right to access, correct, or delete the data we hold about your store. ShipVueue supports Shopify's mandatory GDPR compliance webhooks:
- Customer data requests — we respond within 30 days
- Customer data erasure — fulfilled within 30 days of request
- Shop data erasure — fulfilled within 30 days of uninstall
8. Security
- All data is transmitted over HTTPS/TLS
- Access to your Shopify store is authenticated using Shopify's OAuth 2.0 flow with expiring access tokens
- All incoming webhook requests are verified using HMAC-SHA256 signatures
- App sessions use Shopify's session token standard via App Bridge
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted at this URL with an updated effective date. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact
Questions or concerns about this Privacy Policy?