Privacy Policy

Expatify Track Order — last updated July 5, 2026

What this app does

Expatify Track Order adds an order-tracking page to a merchant’s online store and, when an order is fulfilled, updates the fulfillment’s tracking link and asks Shopify to send the merchant’s own shipping notification email to the customer.

Data we process

• Fulfillment data (tracking number, courier name, fulfillment status) received from Shopify webhooks — used only to build the tracking link. It is processed in memory and not stored.
• Order shipping details (shipping method title and the recipient’s phone number) read from the Shopify API — used only to detect the courier and, for couriers that require it (JNE, J&T), to include the last digits of the phone number in the tracking link so the courier’s tracking API can verify the lookup. These values are not stored by the app.
• Anonymous tracking lookups (tracking number, courier, shipment status, date) performed by customers on the storefront widget — stored so the merchant can see how the widget is used. No name, email, address, or phone number is stored.
• Shop configuration (shop domain, access token, tracking page URL, notification preference) — stored to operate the app for the merchant.

Third-party services

Shipment status is retrieved from the RajaOngkir/Komerce tracking API via our proxy. Only the tracking number, courier code, and (when the courier requires it) the last digits of the recipient’s phone number are sent — never names, emails, or addresses. The app is hosted on Vercel and data is stored in a managed PostgreSQL database (Neon).

Data retention and deletion

When a merchant uninstalls the app, access tokens are deleted immediately. All remaining shop data (settings and anonymous lookup records) is deleted when Shopify sends the shop/redact compliance webhook, 48 hours after uninstall. The app honors all mandatory Shopify privacy webhooks (customers/data_request, customers/redact, shop/redact).

Contact

Questions about this policy or your data? Email hafidz@expatify.co.id.