Shipline is a Shopify app operated by ULTRA SMOOTH STUDIO SRL (“we”, “us”), a company registered in Romania. This policy explains what information Shipline handles when a merchant installs it on a Shopify store. Contact: office@albustudio.com.
What we store
When you install Shipline we receive and store, for your store only:
Your store's domain and the access token Shopify issues to the app.
The settings you choose in the app, and the courier logins you enter. Courier passwords are encrypted at rest.
For every waybill you create: the order number, the receiver's name, phone number and delivery address or chosen courier office, the parcel weight, the cash-on-delivery amount, the courier's shipment number, label link, price and delivery status.
Basic technical logs needed to run and support the service.
We read orders from your store only to prepare waybills: receiver details, totals, payment method and the office chosen at checkout. We do not read customer accounts, browsing data or payment card details.
What we do with it
To create shipments on your own courier contract and send the receiver details to that courier (Econt Express AD, and Speedy AD once enabled), which processes them under its own terms.
To fulfil the order in Shopify with the tracking number and, if you enable it, to let Shopify email the customer.
To show shipment statuses in the app and to mark cash-on-delivery orders as paid when the courier reports the money.
To support you if something goes wrong.
We do not sell data and we do not use it for advertising or profiling.
Where it is processed
Shipline runs on servers rented from Vultr (The Constant Company, LLC) in the European Union. Data is transferred from Shopify to those servers and from there to the courier you chose. Shopify and the couriers are independent controllers of the data they hold.
How long
While Shipline is installed: waybill records are kept so you can see history and print labels again.
When you uninstall Shipline: your access token, settings, courier logins and waybill records are deleted immediately. Shopify then sends a shop-redaction request 48 hours after uninstall, on which we delete any remaining record for your store.
When Shopify forwards a customer's erasure request, we remove that customer's name, phone and address from the related waybills.
Privacy webhooks
Shipline implements Shopify's mandatory privacy webhooks (customer data request, customer redaction, shop redaction) as described above.
Your rights
Merchants and their customers in the EU/EEA have the rights set out in the GDPR, including access, rectification and erasure. Write to office@albustudio.com. Customers should contact the store they bought from; we act on the store's instructions.
Changes
We will post any change to this policy on this page and update the date above.