Privacy policy · TrackVerity
TrackVerity

TrackVerity privacy policy

Last updated: 13 October 2026

TrackVerity ("the app") is a Shopify app made by Elektraset, s.r.o. ("we", "us"). It compares Shopify fulfillment events with carrier tracking data. It flags stale, contradictory and impossible delivery milestones and shows a tracking page with a delivery date range. This policy explains which data the app processes when a merchant installs it, and why.

Who is responsible

Elektraset, s.r.o. processes the data on behalf of the merchant who installed the app. For merchant account data, we are the controller. For questions or requests, write to help@elektraset.com. Website: elektraset.com.

Data the app processes

From the merchant's Shopify store (through the Shopify Admin API and webhooks, with the scopes read_orders and write_fulfillments):

  • the store's domain, currency, Shopify plan name, and whether it is a development store
  • order ids and order names (for example "#1042")
  • fulfillment ids, fulfillment status, tracking numbers, carrier names, tracking URLs and Shopify's estimated delivery date
  • fulfillment events (status, time and message)
  • the store's app subscription (plan, price, status) from the Shopify Billing API

The app does not store customer names, email addresses, phone numbers or street addresses. Shopify's fulfillment webhooks contain them. The app reads only the fulfillment id from the webhook and loads the fulfillment fields listed above.

From carriers that the merchant connects (DHL, UPS, or a tracking feed that the merchant configures): tracking events, scan locations (city and country), estimated delivery dates, and a local last-mile tracking number when the carrier reports one.

From the merchant:

  • the merchant's carrier API credentials, stored encrypted (AES-256-GCM)
  • the email addresses that should receive alerts
  • the merchant's settings

From shoppers on the tracking page: the tracking number that the shopper enters. The app does not use cookies or tracking pixels on the tracking page.

Why we process the data

  • To reconcile shipments, calculate confidence scores and delivery date ranges, and show the exception queue to the merchant. Legal basis: performance of the contract with the merchant.
  • To send the merchant alert emails that the merchant switched on.
  • To publish verified milestones to Shopify as fulfillment events, when the merchant switches this on.
  • To charge for paid plans through Shopify's Billing API.
  • To count anonymous, aggregated usage figures per store (for example how many stores reached a first reconciliation). Development stores are excluded. These figures contain no personal data.

Sharing

We do not sell data. We share data only with:

  • Shopify, the platform the app runs on.
  • The carriers that the merchant connects. The app sends them the tracking number only.
  • Our hosting provider. The app runs on servers operated for Elektraset.
  • The email provider that delivers the merchant's alert emails.

Retention

  • Carrier events: deleted 30 days after a shipment is delivered. The DHL API terms require this.
  • Shipments and their history: deleted when Shopify sends a customers/redact request for the order.
  • All data of a store: deleted when Shopify sends the shop/redact request, 48 hours after the app is uninstalled.
  • Sessions: deleted on uninstall.

Your rights

Shoppers and merchants can ask for access, correction or deletion. Merchants can ask through Shopify's privacy requests or by email. We answer Shopify's customers/data_request, customers/redact and shop/redact webhooks. The app keeps no customer personal data beyond order ids and tracking numbers. Under the GDPR you can also complain to a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Security

  • All traffic uses HTTPS.
  • Carrier credentials are encrypted at rest.
  • Requests from Shopify are verified with HMAC signatures.
  • The tracking page works only through Shopify's signed app proxy.

Changes

We will post changes on this page and update the date at the top.

Contact: help@elektraset.com · https://trackverity.apps.elektraset.com/privacy