Security & GDPR
We keep the minimum needed to create labels and invoices, encrypt what is sensitive and delete on schedule. Below, exactly what, why and for how long.
What data and why
Data map
| Data | Why | How long |
|---|---|---|
| Shopify orders: name, phone, e-mail, shipping address, products, cash-on-delivery amount | Creating the label, the invoice and the tracking page | While the app is installed; deleted on the customer's request (GDPR) and 48 hours after uninstall |
| Courier and invoicing credentials | Calls to your accounts | Encrypted with a key unique to your store; destroyed (crypto-shred) on uninstall and on deletion requests |
| Labels, tracking events, invoices (series, number, state) | History, cash-on-delivery reconciliation, credit notes | While the app is installed |
| The buyer's IBAN on a refunded return | The refund transfer | Encrypted; deleted 30 days after the return closes and at the latest 90 days after the request |
| Activity log (who, what, when) | So you can see what happened | No phones, e-mails or addresses; provider texts are removed on a customer's deletion request |
| Date of the first trial | One trial per store | Kept after uninstall, with no other data |
How we protect data
- Encryption. Credentials are sealed with envelope encryption (AES-256-GCM) and a per-store key. On uninstall the key is destroyed, so the data becomes unreadable even before it is physically deleted.
- Shopify access. Expiring tokens, renewed automatically, with only the permissions orders and shipments need.
- Signed links. The tracking page and the returns portal show order details only through signed links; a bare tracking number shows only the state, dates and city.
- Logs without personal data. Technical logs carry no phones, e-mails, addresses or link parameters.
- Hosting. Infrastructure in the European Union (AWS, Frankfurt region), encrypted databases, daily backups.
- GDPR requests. Coletly answers Shopify's customer data export and deletion requests automatically, and deletes the store 48 hours after uninstall.
What we do not do
- We do not sell or share data with third parties beyond the couriers and invoicing tools you connect, Shopify and our hosting provider.
- We do not message your customers on your behalf; shipping e-mails are sent by Shopify.
- We use no tracking cookies on this site; anonymous statistics run only if you accept.
Data protection contact: suport@coletly.ro. Full text: Privacy policy.