Privacy Policy
Auto Packing Slip is a Shopify app developed and operated by AMNYA Technology. This Privacy Policy explains what data the app collects, how it is used, and how it is protected.
1. Data We Collect
Auto Packing Slip collects only the minimum data required to generate and deliver packing slip emails on your behalf:
- Your Shopify shop domain and access token (encrypted at rest using AES-256, used solely for Shopify API access)
- Order data required to generate the packing slip: order number, line items, quantities, SKUs, shipping address, and customer name
- Fulfillment webhook events received from Shopify: order ID, fulfillment ID, and timestamp
- Job logs: configured recipient email addresses, send status, error messages, and retry history (retained for 90 days)
- App settings you configure: recipient, CC, and BCC email addresses; email subject template; language preference; detail level; custom packing slip HTML template
- Subscription and billing status (managed via the Shopify Billing API)
2. Data We Do Not Collect
- Payment card data or bank details
- Customer passwords or Shopify account credentials
- Customer profile data (email addresses, account details) beyond what appears on the order's shipping address
- Any data beyond what is explicitly requested during app installation
3. How We Use Your Data
Data is used solely to operate Auto Packing Slip: generating a packing slip PDF from your order data and emailing it to your configured recipients whenever a fulfillment is created in your store. We do not sell, share, rent, or use your data for advertising, analytics, or any purpose beyond this.
4. Data Retention
Job logs are retained for 90 days and then automatically purged. Shop data (access token, settings, and job records) is permanently deleted within 48 hours of app uninstallation upon receipt of a GDPR shop redact webhook from Shopify.
You may contact us at any time to request deletion of your data before this period.
5. Third-Party Services
Auto Packing Slip interacts with the following external services:
- Shopify — to receive fulfillment webhook events and fetch order data via the Shopify Admin API
- SMTP email provider — to deliver packing slip emails to the recipient addresses you configure; the order data included in the packing slip is transmitted to this provider for delivery
No other third-party services receive your data.
6. Data Security
Shopify access tokens are encrypted with AES-256 before being stored in our database. All traffic is encrypted using TLS 1.2 or higher. Fulfillment webhook payloads from Shopify are validated with HMAC signatures before any processing occurs.
For full details on our security practices and incident response procedures, see our Security & Incident Response Policy.
7. Your Rights
You have the right to request access to, correction of, or deletion of your data at any time. To exercise these rights, contact us at support@amnyatech.com.
8. Contact
For privacy questions or data deletion requests, email support@amnyatech.com.
- General support: support@amnyatech.com
- Data deletion requests: support@amnyatech.com
- Security reports: security@amnyatech.com