Privacy Policy

1) What information we access from Shopify

When a merchant installs and uses the App, the App may access order data through Shopify’s Admin API to generate an export for fulfillment and delivery operations. Depending on the merchant’s store data, this can include:

• Order information (e.g., order number, creation date, cancellation status, tags)
• Line items (e.g., item title, quantity, fulfillable quantity, SKU/variant details when available)
• Shipping information needed for delivery, such as: recipient name, shipping address, and phone number (if present in the order)

2) Why we use this information

We use the information described above to:

• Generate a production sheet (e.g., totals by meal/item) for kitchen prep
• Generate a delivery/export sheet (e.g., delivery address and recipient details) for fulfillment
• Provide the merchant with a downloadable spreadsheet for their operational workflow

3) How the export works and file storage

The export is generated on-demand when a merchant clicks the export action in Shopify Admin.

• The App generates an .xlsx file and returns it directly to the merchant’s browser as a download.
• We do not store the generated Excel file on our servers.
• Order data is processed only as needed to produce the export and provide it to the merchant.

4) Data retention

Our goal is to retain personal information only for as long as necessary to operate the App.

• Exports: Not stored by us on our servers; they are downloaded to the merchant’s device.
• Operational logs (if any): We may keep minimal technical logs necessary for security, troubleshooting, and reliable operation (for example, timestamps, shop identifier, and error messages). We do not intentionally store customer shipping addresses or phone numbers in logs.

5) Sharing and disclosures

We do not sell personal information.

We share personal information only in limited circumstances, such as:

• Service providers that help us operate the App (hosting, monitoring), under confidentiality obligations
• Legal requirements if we are required to comply with applicable law or valid legal process

6) Security

We use reasonable administrative, technical, and organizational measures to protect personal information, including:

• Encrypted transport (HTTPS/TLS) for data transmitted to/from the App
• Access controls to limit who can access systems that support the App
• Least-privilege practices for credentials and app permissions

7) Merchant controls

Merchants control whether to install the App, and can uninstall it at any time. Uninstalling the App revokes the App’s access to the merchant’s store data.

8) Requests, rights, and contact

If you are a merchant using the App and have questions about this policy or our data practices, contact us:

• Email: support@theecompilot.com
• Company: The Ecom Pilot LLC

9) Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.