Privacy Policy
This policy covers the Wayvo: Order Tracking Page Shopify app only. It does not cover the StoreFleet website or any other StoreFleet product.
Last updated 1 November 2026 · Data controller for merchant data: StoreFleet (Jose James, LLC) — 131 Continental Dr, Suite 305, Newark, DE 19713, USA, contact [email protected]
The short version
Wayvo adds an order tracking page to a Shopify store at /apps/track on the store's own domain. A buyer types their order number and the order's email address; the app looks up only the order that matches both and shows its status, each package with its carrier, tracking number and link, the carrier events Shopify has, and items not shipped yet. No customer login is needed. The app stores nothing about buyers — the order number and email are used for that one lookup and are not kept; we keep only daily lookup counts. If the merchant adds their own 17TRACK API key, the tracking numbers of the order being viewed are sent to 17TRACK to fetch carrier scans.
What we process when a buyer looks up an order
When a buyer submits the tracking form, the store forwards the request through Shopify's app proxy to our server. We use the order number and email address to request the matching order from Shopify's Admin API, and return the order status, fulfillments, tracking numbers and links, carrier events and unshipped items to the buyer's browser. If the number and email do not match the same order, nothing is shown. The order number, email address and order details are not written to our database. For this lookup we act on behalf of the merchant, who is the controller of their buyers' data.
What we store, and why
| Data | Why | Kept until |
|---|---|---|
| Shop domain and shop name | To know which shop an installation belongs to | The shop is erased (shop/redact) |
| Shop owner's email address, the shop's primary language, and whether it is a development store | Read from Shopify when the app is installed, so the service emails described below reach the right person in the right language, and so development stores are never emailed | The shop is erased |
| Shopify access token | To read the matching order through the Admin API on the merchant's behalf | Voided the moment the app is uninstalled |
| Tracking page settings — heading, instructions, colours, font, layout, the order details shown, and an optional background image reference | To show the tracking page the way the merchant configured it | The shop is erased |
| The merchant's own 17TRACK API key, if they add one | To request carrier scans from 17TRACK for orders looked up on that store | Until the merchant removes it, or the shop is erased |
| Daily lookup counts (number of lookups and how many found an order) and shipment status summaries shown on Home | To show the merchant how the page is used and which shipments are delayed, attempted or without an update for 7 days | The shop is erased |
What we never store
- A buyer's order number, email address, name, address or phone number
- Order contents, totals or payment details — read from Shopify at the moment of a lookup and discarded
- Card or bank data of any kind — the app never sees it
Permissions the app asks for
These match the app's configuration exactly.
- Requested at install:
read_orders(read the order that matches the buyer's number and email) andread_all_orders(so buyers can look up orders older than 60 days; Shopify approves this permission separately). - Optional, requested only when the merchant uses the feature:
read_online_store_navigationandwrite_online_store_navigation(add the tracking page to a store menu when the merchant presses that button), andwrite_files(upload a background image the merchant chooses for the page).
The app does not write to orders, customers or products.
Legal basis
- Providing the app to the merchant (shop details, access token, settings, 17TRACK key, lookup counts): performance of our contract with the merchant.
- Service emails and product analytics (Microsoft Clarity): our legitimate interest in supporting and improving the app; you can opt out of emails at any time.
- Buyer lookups: processed on the merchant's instructions, as their processor; the merchant decides the legal basis towards their buyers.
Sharing and sub-processors
- Shopify — the platform the app reads orders from.
- 17TRACK — only if the merchant adds their own 17TRACK key: the tracking numbers (and carrier, where known) of the order being viewed are sent to 17TRACK to fetch carrier scans. 17TRACK bills the merchant directly; its own terms and privacy policy apply to that account.
- Cloudflare — routes traffic to our server and terminates TLS; it does not run analytics or store request content.
- StoreFleet Support Hub and our own mail server — systems we operate ourselves, used for the service emails below.
- Microsoft Clarity — records how the merchant and their staff use the app's screens inside Shopify admin (page views, clicks, scrolls) so we can fix confusing screens. Screen text is masked in the browser before anything is sent, and screens that show orders are masked in full.
We do not sell data, and we do not use Merchant Data or buyer data to train or develop AI or machine-learning models.
Service emails
The shop owner's email address, the shop's primary language, shop domain, shop name, whether it is a development store, and when the app is installed or uninstalled are shared with StoreFleet Support Hub, the support system we operate ourselves. We use them only to send service emails about the app: a welcome, setup help, tips, questions about your satisfaction and feedback, a request to review the app, and a short note after you uninstall. Development stores are never emailed. You can opt out at any time by replying STOP to any of these emails or by writing to [email protected].
Erasure and Shopify's privacy webhooks
- On uninstall (
app/uninstalled) — the stored access token is voided immediately, so the app can no longer reach the shop, and the tracking page stops answering. shop/redact(sent by Shopify 48 hours after uninstall) — the shop's domain, name, owner email and language, settings, 17TRACK key and lookup counts are deleted.customers/data_request— because the app stores no buyer data, there is no buyer data held by us to report; we tell the merchant so if they ask.customers/redact— because the app stores no buyer data, there is nothing about that buyer to delete; any record of the request itself is deleted.
Your rights
Merchants can ask for access to, correction or deletion of the data we hold about their shop by writing to [email protected]. Buyers should contact the store they ordered from; the merchant can reach us at the same address if they need our help to answer.
Changes
If the app's permissions or data use change, this page changes with them and the "last updated" date moves.
StoreFleet (Jose James, LLC), 131 Continental Dr, Suite 305, Newark, DE 19713, USA
[email protected]