Privacy Policy

1. Scope

This policy covers data processed by the App when it is installed on a Shopify store and connected to a LogixSaaS account. It applies to merchant account data and to customer and order data that Shopify makes available to the App for fulfillment.

2. Information we collect

Depending on how the App is used, we may process:

• Shop and authentication data — shop domain, OAuth session tokens, staff user identifiers associated with the install, and tenant mapping used to reach the merchant’s LogixSaaS API.
• Order data — order identifiers, line items, shipping and billing addresses, fulfillment and tracking status, and related webhook payloads needed to create and update delivery jobs.
• Customer data — names, email addresses, phone numbers, and shipping details associated with orders, to the extent required for courier delivery and customer support within LogixSaaS.
• Product data — product and variant details referenced on orders for accurate fulfillment.
• Operational logs — sync job status, errors, and cursors used to retry failed deliveries of order events.

We do not intentionally collect payment card numbers. Payment processing remains with Shopify and the merchant’s payment providers.

3. How we use information

We use the information above to:

• Authenticate the App and keep the merchant’s Shopify session valid.
• Sync new, updated, and cancelled Shopify orders into the merchant’s LogixSaaS account as delivery jobs.
• Push fulfillment and tracking updates from LogixSaaS back to Shopify.
• Display orders, customers, products, settings, and integration logs inside the embedded App.
• Respond to Shopify mandatory compliance webhooks (customer data requests, customer redaction, and shop redaction).
• Operate, secure, debug, and improve the App.

4. How we share information

Order and customer data required for delivery are sent to the LogixSaaS environment the merchant connects during onboarding (the merchant’s courier / logistics tenant). That tenant processes the data to fulfill and track shipments.

We also use infrastructure providers that host the App and its database (for example cloud hosting and managed PostgreSQL). Those providers process data only to provide their services to us.

We do not sell personal information. We do not share Shopify customer data with unrelated third parties for their own marketing.

5. Retention

We retain App session, sync, and mapping data for as long as the App remains installed and needed to provide the service. When Shopify sends a shop/redact webhook after uninstall, we delete local App data for that shop (sessions, sync jobs, cursors, and tenant mapping) and forward the request so the connected LogixSaaS tenant can apply its own deletion or anonymisation rules.

Customer-level data request and redact webhooks are forwarded to the merchant’s LogixSaaS tenant, which owns the operational copy of customer and order records used for delivery.

6. Security

Access to Shopify APIs uses OAuth and session tokens. Webhooks are verified with Shopify’s HMAC signature before processing. Data in transit uses HTTPS. Access to production systems is limited to authorized personnel and service accounts needed to run the App.

7. Your rights and choices

Merchants can uninstall the App at any time from Shopify admin. Uninstall triggers Shopify’s compliance flow, including shop data redaction after the required waiting period.

Individuals whose data appears on Shopify orders should contact the merchant first. Merchants (or Shopify, via mandatory webhooks) can request access, correction, or deletion consistent with applicable privacy laws and Shopify’s requirements.

8. International transfers

The App and LogixSaaS tenants may be hosted in regions different from where the merchant or customers are located. By installing the App, merchants instruct us to process and transfer data as needed to provide fulfillment services, subject to applicable law and Shopify’s terms.

9. Children

The App is intended for merchants operating commercial Shopify stores. It is not directed at children under 16, and we do not knowingly collect personal information from children.

10. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update constitutes acceptance of the revised policy where permitted by law.

11. Contact

For privacy questions about Logixsaas Fulfillment or LogixSaaS data processing, contact us at support@logixsaas.co.ke or through your LogixSaaS account administrator.