Shipjoin privacy policy
Last updated: 5 October 2026
What Shipjoin does
Shipjoin is a Shopify app that helps merchants ship several orders from the same customer in one parcel. It places Shopify fulfillment holds on newer orders and, when the first order ships, fulfills the others with the same tracking number. It never creates, edits or cancels orders.
Information we access
With the merchant’s permission, Shipjoin reads orders and their fulfillment orders through the Shopify Admin API: order number, dates, payment and fulfillment status, items and the shipping address. The shipping address is used only to tell whether two orders go to the same place.
Information we store
- The shop domain, the app settings chosen by the merchant and Shopify session data needed to run the app.
- For recent open orders: the order ID and number, the fulfillment order ID and salted one-way hashes of the customer ID and of the shipping address. We do notstore names, email addresses, phone numbers or addresses.
- The groups of orders that ship together (order IDs and numbers) and their status.
Order index entries are deleted after 30 days. Groups are deleted 90 days after they ship or are ungrouped (only the number of parcels saved is kept), and their address hash is cleared after 30 days. Daily backups are kept for 7 days. All shop data is deleted when Shopify sends its shop/redact request after the app is uninstalled, and a shopper’s data is deleted on Shopify’s customers/redact request.
How we use and share information
Data is used only to provide the app’s features to the merchant who installed it. We don’t sell or share it, and we don’t use it for advertising. Data is processed on our hosting provider’s servers, encrypted in transit (HTTPS).
Data processing terms
By installing Shipjoin, the merchant instructs us to process their store’s order data only to provide the app’s features. We act as a processor on the merchant’s behalf: we process the data only for that purpose, keep it confidential, protect it with the measures described below, delete it as described above, and notify the merchant without undue delay (within 72 hours) of any personal data breach. Sub-processors: Shopify (platform) and Railway (hosting, SOC 2 Type II).
Security
Data is encrypted in transit (HTTPS) and at rest (encrypted hosting volumes and backups). Customer IDs and shipping addresses are stored only as salted one-way hashes. Access to production systems is limited to the developer and protected by strong passwords and two-factor authentication, and access to order data is logged.
Customers of merchants
Shipjoin doesn’t interact with shoppers and adds nothing to the online store. Shipping confirmation emails, when enabled, are sent by Shopify.
Your rights
Merchants can request access to or deletion of their data at any time. Shoppers can make requests through the merchant, and Shopify forwards them to us. When Shopify forwards a shopper’s data request, we send the merchant the order numbers and grouping status we hold for that shopper’s orders within 30 days.