Legal

Privacy Policy

Your privacy matters. This policy explains how we handle your data.

Last updated: July 27, 2026

1. Introduction

OrderTrackify (“we,” “us,” or “our”) operates the OrderTrackify platform, including the website at ordertrackify.com, the dashboard at app.ordertrackify.com, and associated services. This Privacy Policy describes how we collect, use, and share information when you use our services.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and the credentials you use to authenticate. Shopify and Wix connections use OAuth access tokens; the WooCommerce plugin uses a store-bound credential issued through a one-time connection exchange. Platform credentials are used only to operate the connected integration.

2.2 Store & Order Data

To provide shipment tracking, we access order data from your connected store, including:

  • Order numbers and tracking numbers
  • Carrier information
  • Shipping addresses (city, state, country — no full street addresses)
  • Customer names and email addresses (for delivery notifications)

2.3 Usage Data

We automatically collect standard usage information such as your IP address, browser type, pages visited, and timestamps. This helps us improve the service and diagnose issues.

On the public pricing page, we use a country supplied by our edge provider when available. Otherwise, the current request IP address may be sent to Country.is solely to infer a country for the initial currency and AUD tax presentation. Our pricing endpoint returns a suggested display currency, reference rates, and whether exact AUD prices use “Including GST” or “Excluding GST”. Non-AUD estimates are labelled “Excluding Tax”. The endpoint does not return the country or persist the IP address. Country.is states that its hosted service does not log requests. Your browser locale is used only as a fallback.

2.4 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card details. Stripe Checkout collects the billing address and, where supported and supplied, the legal business name and tax ID needed to calculate tax and prepare invoices. Stripe’s privacy policy applies to payment data.

3. How We Use Your Information

We use your information to:

  • Provide and maintain the OrderTrackify service
  • Track shipments and send delivery notifications to your customers
  • Process subscription payments
  • Send you account-related emails (e.g., billing, security alerts)
  • Improve our platform based on usage patterns
  • Respond to support requests

4. How We Share Your Information

We do not sell your personal information. We share data only with:

  • Tracking providers (e.g., TrackingMore) to retrieve shipment status updates. Only tracking numbers and carrier codes are shared.
  • Email service providers(e.g., AWS SES) for account messages and SaaS-delivered Shopify/Wix shipment emails. WooCommerce customer notifications are delivered by the merchant’s WordPress installation and configured providers.
  • Payment processors (Stripe) to handle subscription billing.
  • IP country lookup providers (Country.is) to select an initial pricing-page currency when an edge-provided country is unavailable.
  • Law enforcement if required by law, subpoena, or court order.

5. Data Retention

We retain account, order, and shipment data while your account is active unless you remove it through an available product control. Account deletion requests have a 30-day cancellation period; after that period, the production deletion process disables access, revokes stored credentials, and anonymises merchant and customer identifiers. Limited billing, security, backup, or transaction records may be retained where needed for fraud prevention, financial reconciliation, disaster recovery, or legal obligations.

6. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS) and AES-256-GCM encryption for stored platform OAuth tokens
  • HMAC-signed webhook payloads
  • Rate limiting and input validation controls applied according to endpoint risk
  • Bcrypt password hashing with automatic salting
  • JWT-based authentication with short-lived access tokens

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a machine-readable format
  • Withdraw consent for marketing communications
  • Lodge a complaint with a data protection authority

To exercise these rights, contact us at [email protected].

8. Cookies & Local Storage

Our application surfaces use essential first-party cookies, session storage, or local browser storage where required for authentication and embedded-app operation. We do not currently use advertising pixels or sell browser activity to third parties.

If you manually select a pricing currency, the public website stores that currency code in your browser so it can honour your preference on later visits. This functional preference does not contain your IP address or payment information.

9. Children’s Privacy

OrderTrackify is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Your continued use of the service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected].