Privacy Policy
Order Relay is operated by ARTiFICIAL MEDIA. This Privacy Policy explains how information is processed when a Shopify merchant installs or uses Order Relay.
1. Who we are
ARTiFICIAL MEDIA operates Order Relay, a Shopify application that lets merchants automate the export and delivery of Shopify order data to destinations they configure.
2. Information Order Relay processes
Depending on the automations a merchant configures, Order Relay may process:
- Shopify shop identifiers and app authentication/session information.
- Order information, including order identifiers, status, line items, totals, shipping information and other order fields made available through the Shopify API.
- Customer information associated with orders when required by a configured export or filter.
- Product, shipping and related Shopify information required by configured automation filters.
- Automation settings, templates, filters, schedules, destinations and post-processing settings.
- Export history, delivery responses, error information and operational logs used to run, secure and troubleshoot the service.
- Usage records required to report billable successful exports to Shopify where applicable.
3. How information is used
We process information to:
- run merchant-configured export automations;
- apply filters, templates and formatting rules;
- deliver exports to merchant-configured destinations;
- perform merchant-configured Shopify post-processing;
- operate retry, history, billing, security and support functions;
- respond to Shopify privacy and compliance requests; and
- detect, investigate and prevent service abuse or technical failures.
4. Merchant-configured destinations
Order Relay can transmit exported information to HTTPS, email or SFTP destinations configured by the merchant. Once information is delivered to a merchant-selected destination, that destination and the merchant control its subsequent handling. Merchants are responsible for ensuring that their chosen destinations are appropriate and lawfully configured.
5. Service providers and Shopify
We may use hosting, email, networking and other infrastructure providers as necessary to operate Order Relay. Information is also exchanged with Shopify where needed to authenticate the app, access merchant-authorized Shopify data, process privacy requests and administer app billing.
6. Data retention
Order Relay is designed to limit retention of operational data. Export-history payload, response and filter-summary data is retained for up to 30 days. Protected-data access logs are retained for up to 90 days. Submitted Shopify billing-event outbox records are retained for up to 90 days after submission.
Pending billing records may be retained after uninstall where necessary to preserve and submit a usage event relating to a successful export completed before uninstall. Automation, job, shop-setting and Shopify session data is deleted through the app uninstall cleanup process, subject to records that must be retained for billing, security, legal or compliance purposes.
7. Security
Order Relay uses HTTPS or other encrypted transport for supported remote destinations. Stored destination credentials are encrypted before being saved. Access to protected Shopify data is limited to functions required to provide the service.
8. Shopify privacy requests
Order Relay supports Shopify compliance webhooks for customer data requests, customer redaction and shop redaction. Shopify customers seeking access to or deletion of data held by a merchant should normally contact that merchant first.
9. Our role
For Shopify customer and order data processed on a merchant's instructions, ARTiFICIAL MEDIA generally acts as a service provider or processor to that merchant. We may act as a controller for limited information used for app administration, security, support, billing and legal compliance.
10. Your rights
Depending on applicable law, individuals may have rights relating to access, correction, deletion, restriction, objection or portability of personal information. Requests concerning data controlled by a Shopify merchant should be directed to that merchant. Requests concerning information controlled directly by ARTiFICIAL MEDIA may be sent to the contact address below.
11. Changes to this policy
We may update this Privacy Policy when Order Relay, our practices or applicable requirements change. The effective date above will be updated when a revised policy is published.
12. Contact
ARTiFICIAL MEDIA17 Gault Park
Ballymoney
BT53 6HF
Northern Ireland
privacy@artificial-media.com