Privacy policy

Who this applies to

Seallo Connect is a Shopify app that connects a merchant's Shopify store to the merchant's workspace in Seallo. The merchant decides how its orders are handled. Seallo processes order data on the merchant's behalf to provide the service.

This policy also covers the optional Meta Ads connection described below.

Shopify data we access

With the read_orders permission, for each eligible cash-on-delivery order, we read:

• Buyer contact details from the order: shipping name, phone number and delivery address (street, city, country).
• Order details: order number, date, currency, amounts, items, quantities, payment and fulfilment status.
• Shop identity: the store's myshopify.com domain, and the app's installation and subscription status.

Shopify data we do not access

We do not read buyer email addresses, payment card details, customer accounts or marketing data. The app does not request customer-directory or product permissions, and does not write to your Shopify store.

How we use it

Only to show the order to the merchant's team in Seallo, let them confirm it with the buyer, manage stock, and prepare delivery with the carrier the merchant chooses. We do not sell data, use it for advertising or use it to profile buyers.

Where it is stored and who can see it

Imported orders are stored in the merchant's Seallo workspace and are visible only to people the merchant has authorised there. Workspaces are isolated from each other. The app's Shopify access credentials are kept in an access-controlled database run by our hosting provider and are deleted when the app is uninstalled. All communication uses HTTPS, and requests between Shopify, the app and Seallo are cryptographically signed and verified.

Who we share it with

Only with the delivery carrier the merchant connects, so that parcels can be delivered, and with infrastructure providers needed to host the service. We do not share it with anyone else, except where the law requires.

Retention and deletion

• While the app is connected, orders are imported and kept in the merchant's workspace as its business records.
• When the app is uninstalled or disconnected, importing stops and connection credentials are removed. Shopify session data for the shop is deleted. Orders already imported stay in the merchant's workspace until the merchant deletes them or a Shopify privacy request applies.
• Completed Seallo-imported orders (delivered, cancelled or returned) have buyer contact details redacted after 180 days under the platform retention job, while amounts, statuses and replay identity are kept.
• When Shopify sends a customer redaction or shop redaction request, we redact buyer contact details, notes and events on the affected orders once they are completed. Orders still being delivered are held, and flagged for the merchant to review, until they are completed, so that deliveries are not broken. Amounts, statuses and identifiers needed for accounting and to prevent re-importing are kept.

Meta Ads

When you authorize Meta Ads, Seallo lists the ad accounts you can connect. Seallo reads the account name, currency, time zone and status. For accounts you link, Seallo reads campaign, ad set and ad names and details, daily spend, and results reported by Meta, such as impressions, clicks and attributed purchases.

Seallo uses these data in your workspace to report advertising costs and include them in product profitability. The connection is read-only for ads. Seallo stores the Meta access token encrypted so it can sync your linked accounts.

To stop syncing, open Meta Ads in your Seallo workspace and select Disconnect. Seallo removes the access token, unlinks the accounts and asks Meta to revoke the permissions. You can also request deletion through Meta. When Meta sends the request, Seallo removes the access token and Meta user ID from the affected connections and stops syncing. Seallo keeps a hashed identifier to record the deletion. Spend already synced stays in the merchant's workspace as part of its business records.

Cookies

These public pages use a necessary cookie to remember your language choice. They do not load Meta or TikTok measurement pixels. Fonts may be loaded from Google Fonts. See the cookie policy for details and choices.

Privacy requests from buyers

Buyers should contact the merchant they bought from. When Shopify forwards a customer data request, we prepare an export of the imported order data about that customer for the merchant to review and provide. Merchants and other requesters can also use the data-rights form linked from this site, or write to us at the address below.

Security

Requests from Shopify are verified with Shopify's signature, and server-to-server requests use a separate signed key with a short time window to prevent forgery and replay. Access to a workspace's data is limited to authorised members of that workspace.

Changes

We will update this page and its date when our practices change.

Contact

For support, privacy questions or data requests, contact the Seallo team through your Seallo workspace.

Your data rights