Privacy policy

WarehouseSync ("the app") is operated by LeaderSol Technologies LLC. This policy explains what the app accesses in a Shopify store, why, and who it is shared with.

What we access

• Orders, including the customer's name, shipping address, phone number and email, line items and SKUs — needed so the merchant's warehouse can pick, pack and ship.
• Fulfillment orders, fulfillments and tracking — to record shipments the warehouse confirms.
• Products, inventory and locations — to match SKUs and update stock.
• Store details (domain, store name, the store owner's email, Shopify plan) and the app's Shopify access token — so we can support the merchant and bill correctly.

How we use and share it

Order data is passed to the warehouse or 3PL the merchant chooses and connects, only when that warehouse requests it with credentials the merchant issued. We do not sell data, use it for advertising, or share it with anyone else.

Service providers

The app and its database are hosted on Railway (railway.com). Billing is handled by Shopify. Alert emails to the merchant are sent through Resend (resend.com), which receives the merchant's email address and the alert text (store and order numbers, never customer details). We use no other service that receives store or customer data.

What we store

• The Shopify access token, encrypted at rest (AES-256-GCM).
• Warehouse API secrets, stored only as one-way hashes.
• Settings the merchant chooses (warehouse, location, features) and subscription status.
• Technical request logs (time, endpoint, status, error text), kept for at most 15 days. We do not keep copies of orders or customer records; order data is read from Shopify at the moment the warehouse asks for it.

Security

All traffic uses HTTPS. Access to production systems is limited to staff who operate the service. Each store's data is isolated: a warehouse credential works for one store only and can be revoked by the merchant at any time.

Your rights and deletion

When the app is uninstalled, its access token is deleted immediately and warehouse credentials are revoked. Shopify sends us a deletion request 48 hours later, and we then erase everything we hold about the store. We honour Shopify's customer data and redaction requests (GDPR / CCPA). To request access or deletion, contact [email protected].

Contact

LeaderSol Technologies LLC — [email protected].