Oplify ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our print-on-demand inventory management platform.
2. Information We Collect
Information You Provide
We collect information you provide directly to us:
Account Information: Name, email address, password, company name
Store Information: Store name, Shopify credentials, API keys
Business Data: Products, orders, inventory, customer information
Cookies: Session cookies, preference cookies, analytics cookies
3. How We Use Your Information
We use the collected information for:
Service Provision: To operate, maintain, and provide features of the Service
Order Processing: To sync orders, manage inventory, coordinate production and shipping
Account Management: To create and manage your account, authenticate users
Communication: To send transactional emails, notifications, and support responses
Improvement: To analyze usage and improve our Service
Security: To detect and prevent fraud, abuse, and security incidents
Compliance: To comply with legal obligations and enforce our terms
Marketing: To send promotional communications (with your consent, where required)
4. Merchant Customer Data
When a merchant connects a store, we receive personal data about the merchant's customers (the people who place orders). We process it only for the merchant, as a data processor. The merchant is the data controller. The terms are in the Terms of Service.
Personal data fields
Name: customer name from the order or customer record
Email address
Phone number
Delivery address: address lines, city, province, postal code, country
Customer summary: number of orders, total amount spent, first and last order dates, VIP flag, tags, and notes entered by the merchant
Order context: order number, items, totals, payment status, order history, and the raw order payload received from Shopify
Carrier data: delivery status and tracking details returned by the shipping carrier
Purposes
Fulfil orders: production, packing, and printing of shipping labels
Create shipments with the carrier, which receives the recipient's name, phone, and address
Handle returns, cash on delivery follow-up, and support requests
Show the merchant order and customer history, and search orders by customer
Show the merchant's support team the customer's contact and order summary in our own chat service, so they can answer messages
Detect fraud and abuse and keep an audit trail
We do not use merchant customer data for marketing or advertising, and we do not sell it. We calculate order counts, total spend, and a VIP flag per customer, only to show them to the merchant. We do not use them to make automated decisions about customers.
Retention
We keep merchant customer data for 12 months after the last activity on the order, whether the order was closed, cancelled, or left open. After that we anonymise the customer record, the order record, the stored Shopify order payload, the delivery carrier data, and the change history of those records: name, email, phone, address, and similar personal data are removed or replaced. We keep order totals, dates, statuses, and product SKUs for accounting. Archived copies of Shopify order payloads are deleted after 12 months. We also delete the matching contact in our own chat service once the store's chat is connected. Backup copies may keep data for longer, until the backup is deleted. When Shopify sends a customer data erasure or shop erasure request, we apply it as Shopify requires.
Security
Merchant customer data is encrypted in transit with TLS. Access is limited by role-based permissions.
Access logging
We record each time a user opens a customer's or order's details, or exports customer data. Each entry holds the user, the store, the record, and the time.
Shopify privacy requests
We handle Shopify's three mandatory privacy webhooks: customer data request, customer data erasure (customer redact), and shop data erasure (shop redact). A data request is logged and we prepare an export of the data we hold for that customer. An erasure request anonymises the matching customer and order records, and a shop erasure request does the same for all customer data received from that Shopify store. To send a request directly, contact support@oplifyco.com.
5. Information Sharing
We do not sell your personal information. We may share your information with:
Our own chat service: For merchants who use it, customer name, email, phone, city, store name, order count, total spend, and VIP flag are sent to our own chat service (self-hosted Chatwoot at chat.oplifyco.com), which Oplify operates
Service Providers: Third-party vendors who perform services on our behalf (hosting, analytics, error monitoring such as Sentry, payment processing, shipping carriers)
E-commerce Platforms: Shopify and other integrated platforms to sync data
Business Transfers: In connection with a merger, acquisition, or sale of assets
Legal Requirements: When required by law or to protect our rights
With Your Consent: When you explicitly authorize sharing
6. Data Security
We implement industry-standard security measures to protect your information:
Encryption: Data is encrypted in transit (TLS/SSL), and credentials such as API keys and two-factor secrets are encrypted at the application level
Access Controls: Role-based permissions limit access to sensitive data
Authentication: Secure password requirements and session management
Monitoring: Continuous monitoring for security threats and vulnerabilities
Auditing: Audit logs track data changes, and access logs record who views or exports customer personal data
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account termination, we retain certain data for legal compliance, dispute resolution, and legitimate business purposes. Merchant customer data follows the 12 month schedule in section 4. You may request deletion of your data by contacting us.
8. Your Rights
Depending on your location, you may have the following rights:
Access: Request access to your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your information
Portability: Request a copy of your data in a portable format
Objection: Object to certain processing of your information
Withdrawal: Withdraw consent where processing is based on consent
Essential Cookies: Required for authentication and security
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use the Service
You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.
10. Children's Privacy
Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: