Privacy Policy

1. Introduction

eTrack ("the App") is a Shopify Application developed and operated by WIRESELLS SRL ("we", "us", or "our"). We are committed to protecting the privacy and security of the data processed through our logistics and invoicing automation services.

By installing or using eTrack, you agree to the collection and use of information in accordance with this policy.

2. Operator Information

3. Information We Collect

To provide automated shipping labels, tracking, and invoicing, eTrack collects and processes the following types of data from your Shopify store:

• Merchant Information: Shop domain (*.myshopify.com), shop ID, email, and app configuration settings.
• Order Data: Order IDs, line items, weights, values, and financial status required to generate invoices and shipping manifests.
• Customer Personal Information: Names, shipping addresses, phone numbers, and email addresses. This data is strictly necessary to generate Air Waybills (AWBs) and invoices with third-party providers.

4. How We Process and Share Data

We do not sell your data. Data is shared only with the specific third-party services you actively connect to eTrack to fulfill your business operations.

4.1 Third-Party Service Providers (Sub-processors)

To function correctly, eTrack transmits data to the following categories of service providers based on your configuration:

Hosting & Infrastructure:

• Hetzner Online GmbH (Germany): All application code, databases, and data processing occur on secure Virtual Private Servers (VPS) located in Germany.

Courier Integrations:

• Depending on your shipping settings, order details (Sender/Recipient data) are transmitted via API to our courier partners, including: Sameday, Cargus, Geniki Taxydromiki, Meest, GLS, Fan Courier, and Packeta.

Invoicing Integrations:

• If enabled, financial and customer data is sent to SmartBill or Oblio to generate fiscal invoices.

Operational Tools:

• Sentry: We use Sentry for real-time error monitoring and debugging to ensure service stability. This may capture technical logs and metadata regarding app performance.
• Google Maps Platform: Used within the "Easybox Checkout UI Extension" to display interactive maps for locker selection.

5. Data Security

We implement robust security measures to protect your data integrity:

• Encryption: All data in transit is encrypted via SSL/TLS (HTTPS).
• Webhook Security: We verify the integrity of all incoming data from Shopify using HMAC-SHA256 signatures to prevent spoofing.
• Access Control: Our database is protected by restricted access protocols, and we utilize parameterized queries to prevent SQL injection attacks.
• Network Security: Our infrastructure operates behind a reverse proxy (Nginx) and utilizes strict firewall rules.

6. Data Retention

• Operational Retention: We maintain database backups for a period of 30 days for disaster recovery purposes.
• Legal Retention: For tax and accounting purposes (compliance with Romanian law), we may retain basic transaction records associated with generated invoices for up to 3 years.
• Data Deletion: Upon uninstalling the App, we process Shopify's "Redact" webhooks (shop/redact, customers/redact) to remove personal data in compliance with GDPR, unless retention is required by law.

7. Your Rights (GDPR)

As a merchant operating within the EU, or processing EU citizen data, you have the right to:

• Access the data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (Right to be Forgotten).

To exercise these rights, please contact us at support@getetrack.com.

8. Changes to this Policy

We reserve the right to update this privacy policy at any time. Changes will be effective immediately upon posting on our application or website. We encourage you to check this page regularly.