Privacy Policy
This Privacy Policy explains what data Aramex Delivery Sync collects, how it is used, and how it is protected. Aramex Delivery Sync is developed and operated by AMNYA Technology.
1. Data We Collect
Aramex Delivery Sync collects only the minimum data required to operate the delivery tracking service:
- Your Shopify shop domain and access token (encrypted at rest with AES-256, used for Shopify API access)
- Your Aramex API credentials — Account Number, Username, Password, and Entity (encrypted at rest with AES-256, used only to query Aramex tracking status)
- Shopify order IDs, order names, and fulfillment IDs (used to match Aramex shipments to Shopify orders)
- Aramex AWB (waybill) numbers and tracking status events returned by the Aramex API
- Subscription and billing status (managed via the Shopify Billing API)
- App settings you configure (e.g. polling interval, sync preferences)
2. Data We Do Not Collect
Aramex Delivery Sync does not collect or store the following:
- Customer personal information — names, email addresses, phone numbers, or delivery addresses
- Order line items or product information
- Payment card data or bank details
- Any data beyond what is listed in Section 1
3. How We Use Your Data
Data is used solely to operate the delivery sync service: periodically querying Aramex for shipment status updates and writing fulfillment events back to your Shopify store when a delivery is confirmed. We do not sell, share, rent, or use your data for advertising, analytics, or any purpose beyond delivering this functionality to you.
4. Data Retention
Tracking event logs and sync history are retained for 30 days and then automatically purged. Shop data (Shopify access token, Aramex credentials, settings, and shipment records) is permanently deleted within 48 hours of app uninstallation upon receipt of a GDPR shop redact request from Shopify.
You may contact us at any time to request deletion of your data before this period.
5. Third-Party Services
Aramex Delivery Sync interacts with two external services:
- Shopify — to read fulfilled order and fulfillment data, and to write fulfillment events when a delivery is confirmed. Data shared is limited to what is necessary for these operations.
- Aramex — to query shipment tracking status using your stored API credentials. AWB numbers are sent to Aramex solely to retrieve delivery updates.
No other third-party services receive your data.
6. Data Security
Both your Shopify access token and your Aramex API credentials are encrypted with AES-256 before being stored in our database. Credentials are only decrypted at the moment of an API call and are never logged. All traffic between our servers, Shopify, and Aramex is encrypted using TLS 1.2 or higher.
For full details on our security practices and incident response procedures, see our Security & Incident Response Policy.
7. Your Rights
You have the right to request access to, correction of, or deletion of your data at any time. To exercise these rights, contact us at support@amnyatech.com.
8. Contact
For privacy questions or data deletion requests, email support@amnyatech.com.
- General support: support@amnyatech.com
- Data deletion requests: support@amnyatech.com
- Security reports: security@amnyatech.com