These terms apply between HaloTrack (processor) and each merchant who installs it (controller), alongside Shopify's Partner Program and API terms. Installing HaloTrack accepts them.
Purpose: we process order data (order number, order email, items, fulfillment and tracking) only to show the merchant's own customers their order status and to give the merchant delayed-shipment reports. No sale, profiling, advertising or other use.
Minimisation: the order email is compared in memory and never stored or logged. We store no customer personal data.
Sub-processors: Cloudflare, Inc. (Workers and D1, encrypted at rest) and Shopify. New sub-processors are announced on this page 30 days in advance.
Security and confidentiality: see /security. Only the developer can access production; every access to shop data is logged.
Deletion and assistance: tokens and counters are deleted on uninstall, all shop data on shop/redact. We help merchants with data subject requests; we hold no customer records, so customers/data_request and customers/redact have nothing to return.
Breaches: we notify affected merchants without undue delay and within 72 hours of becoming aware.
2026-10-31