Privacy Policy

Last updated: September 15, 2025

Ordery ("the App", "we", "our", or "us") provides a service that helps Shopify merchants detect and merge potential duplicate or closely timed orders ("the Service"). This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify store.

Information We Collect

  • Order information: We access customer email, shipping address, and order details to detect potential mergeable orders.
  • Store information: Basic store details such as shop domain and store settings necessary to operate the App.

We do not collect payment card details, passwords, or any other sensitive personal data beyond what is required for order analysis.

How We Use Your Information

  • Detect orders that may be merged (same customer, address, time window).
  • Provide insights to merchants about potential shipping optimizations.
  • Operate, maintain, improve, and support the App.

We do not sell, rent, or share customer data with third parties for marketing purposes.

Data Retention

  • We store order data only as long as necessary to provide the Service.
  • No personally identifiable customer information is stored permanently in our systems beyond what is required for analysis.
  • Merchants may request data deletion at any time (see Contact Us).

Sharing Your Information

  • Shopify: We rely on Shopify APIs and webhooks, and information is shared as needed to operate the App in compliance with Shopify policies.
  • Service Providers: We may use third-party hosting or analytics services (e.g., Vercel) that process data on our behalf under confidentiality obligations.
  • Legal Requirements: We may disclose information to comply with applicable laws or lawful requests.

International Transfers

Your information may be transferred outside of your jurisdiction, including to the United States and Canada, where we host our infrastructure and/or our service providers operate. Where required, we implement appropriate safeguards for such transfers.

Your Rights

If you are a resident of the European Economic Area (EEA), the United Kingdom (UK), or similar jurisdictions, you have the right to access, correct, update, or delete your personal information. To exercise these rights, please contact us using the information below. If you are a merchant, you can also remove the App from your Shopify store at any time, after which we will cease further data collection.

Security

We take reasonable and appropriate measures designed to protect the information provided via the App from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

Before we persist any customer-identifiable order attributes we first transform (hash) them using a per-shop salt so that raw email addresses and shipping addresses are not stored in plaintext. Additionally, our database infrastructure is encrypted at rest and in transit, and access is restricted to least-privilege service credentials. This combination of hashing and industry standard encryption helps mitigate the risk of exposure in the unlikely event of a data breach.

Data Deletion & Merchant Controls

You can request deletion of data related to your store by contacting us. Upon verification, we will delete relevant data within a reasonable time, unless we are required to retain it for legal, accounting, or reporting obligations.

Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Material changes may be communicated via the merchant email associated with your store.