Privacy Policy

Effective date: May 22, 2026

Dropship Supply provides a Shopify dropshipping and fulfillment application for merchants. This policy explains how we collect, use, share, retain, and protect personal data processed through the application.

Data we process

We process only the data needed to provide the app and fulfill merchant orders:

• Shop information such as shop domain, app installation status, access scopes, and app settings.
• Product and inventory data needed to import products and synchronize cost and stock quantity.
• Order and fulfillment data needed to receive fulfillment requests, calculate payment, submit orders to the fulfillment partner, and synchronize tracking.
• Customer delivery data, including recipient name, shipping address, phone, and email when required for fulfillment, delivery, tracking, support, or claims.
• Claim data, including claim messages and photos uploaded by the merchant for damaged or incorrect shipments.
• Technical logs required for security, troubleshooting, and audit purposes.

How we use data

We use personal data only for the following purposes:

• Connecting the merchant's Shopify store to the app.
• Importing selected products and synchronizing stock and cost.
• Receiving and managing Shopify fulfillment requests.
• Creating payment checkouts and submitting paid fulfillment orders to the fulfillment partner.
• Synchronizing shipment status and tracking information.
• Handling support requests and shipment claims.
• Protecting the app, preventing abuse, and complying with legal obligations.

Data sharing

We do not sell personal data. We share data only with service providers that are necessary to operate the app, including Shopify, hosting providers, payment providers, email delivery providers, and fulfillment or shipping partners that need delivery information to complete an order.

Retention

We retain personal data only as long as needed for the purposes above:

• Shop installation and product mapping data is retained while the app is installed and for up to 30 days after uninstall unless required for legal or dispute purposes.
• Fulfillment order records are retained for up to 24 months for accounting, support, chargeback, and delivery dispute purposes.
• Claim records and claim photos are retained for up to 24 months unless a longer period is required to resolve an open claim.
• Operational logs are normally retained for 30 to 90 days.
• Backups are retained according to hosting provider backup cycles and are deleted or overwritten in the ordinary course of business.

Security

We use HTTPS for data in transit, restrict access to production credentials, store secrets in environment variables, limit personal data access to operational needs, and rely on managed infrastructure controls for storage security. We review data access and retention regularly.

Merchant and customer rights

Merchants may request access, correction, export, or deletion of app data by contacting us. If a customer contacts us directly, we may direct the request to the merchant because the merchant is usually the data controller for customer order data.

International transfers

Data may be processed in countries where our service providers operate. Where required, we use appropriate safeguards such as contractual data protection terms.

Contact

For privacy requests, contact: vuodevaatteet@gmail.com.