Privacy Policy

OrderMerge is operated by AppEcho Labs LLC ("we", "us", or "our"). We are committed to protecting the privacy of our merchants ("you") and your customers. This policy explains what the OrderMerge Shopify app (the "App") reads, what it stores, why, who processes it and how long we keep it.

1. Information We Collect

When you install the App, Shopify gives it access to your store and order data through the Shopify Admin API and webhooks. The App stores the following in its own database:

• Store and account data: your shop domain, the access token Shopify issues to the App, your settings, your plan, and an uploaded packing-slip logo if you add one.
• Customer IDs: the Shopify customer ID on each order, to match orders from the same customer account.
• Hashed email, phone and shipping address: HMAC-SHA256 hashes of the order's email, phone number and shipping address, used only for duplicate matching. The raw values are never stored, and a hash can't be turned back into the original value.
• Orders and duplicate groups: order IDs and order names (such as #1039), order dates and fulfillment status, the duplicate groups orders belong to, and a history of every change the App made to them (tags, holds, notes, refunds, merges) with the staff user ID that made it.
• Data kept to undo changes: when the App adds its warehouse note ("SHIP WITH #1039"), it keeps the order's previous note and custom attributes so the change can be reversed.
• Merges (Merge plan): for each merged order, the original order IDs and names and a snapshot of the originals right before the merge (tags, note, custom attributes, statuses, line item quantities and holds), so the merge can be undone and checked. Auto-merge keeps a log of its latest decision per group, with the order names involved.
• Matching details: a hash of each order's line items, the discount codes used and the product IDs bought, to flag accidental double checkouts and second uses of limit-one offers. Shipment tracking numbers are kept for merged orders.

The App also reads data it does not store:

• Customer names and shipping addresses, read from Shopify when you print a combined packing slip and shown only on that slip.
• Order email, phone and address, which are hashed as soon as an order arrives; the raw values are discarded.
• Order notes, line items and fulfillment details, read when the App writes a note, merges orders or refunds shipping.
• Your store owner email address, read from Shopify each time an email is sent (see below).

2. How We Use Your Information

We use the collected information for the following purposes:

• Duplicate Detection: To compare new orders with your open orders by customer ID and hashed email, phone and address, and group likely duplicates.
• Actions you enable: To tag duplicate orders, place fulfillment holds, add a warehouse note, send Shopify Flow triggers, print combined packing slips, refund shipping when you confirm it, and merge orders on the Merge plan, and to undo those changes.
• Email: to send your store owner email the weekly savings summary (you can turn it off in Settings), plan notices, and reports for customer data requests.
• App Functionality: To authenticate your access to the App and manage your subscription.

3. Data Retention and Storage

We prioritize data minimization. Customer contact details are only stored as one-way hashes, and we keep data only as long as the App needs it:

• Order fingerprints (customer ID and hashes) of shipped or cancelled orders are deleted after 90 days, and all of them are deleted when you uninstall the App.
• Internal processing jobs are deleted within 3 days (14 days if they failed).
• When you uninstall, we delete your sessions, settings, order fingerprints and queued jobs right away. Everything else for your store (duplicate groups and their history, merges, logs and your logo) is deleted when Shopify sends the shop/redact request, 48 hours after uninstall.
• When Shopify sends a customers/redact request, we delete that customer's customer ID, hashes, logs and queued jobs, and remove their previous order notes, merge snapshots and order names from what we keep for undo.

4. Sharing Your Information

We do not sell, trade, or otherwise transfer your information to outside parties. We share data only with the service providers that run the App, who process it on our behalf and keep it confidential:

• Railway hosts the App and its PostgreSQL database, where all of the stored data above is kept.
• Resend delivers the App's emails to your store owner email address.
• Vercel hosts this website (ordermerge.app) and its page analytics. It does not receive your store or order data.
• Shopify provides the store data and handles all billing.

5. GDPR and CCPA Compliance

If you are located in the European Economic Area (EEA), the United Kingdom or California, you have certain rights regarding your personal information. For your customers' data we act as a data processor on your behalf, so customers should send requests (access, deletion) to your store, and Shopify forwards them to us:

• Access requests (customers/data_request): we email your store owner email a report of everything we store for that customer, so you can answer them.
• Deletion requests (customers/redact): we delete or scrub the customer's data as described above.
• Your own data: email us to access or delete the data we hold about your store, or uninstall the App to have it deleted automatically.

We fulfill data requests within 30 days of receiving them.

6. Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us at: