Privacy Policy

Last updated: 9 October 2026

This policy explains what data the DockGuard Shopify app processes for merchants who install it, why, and how it is protected. For order data, the merchant is the data controller and DockGuard is the data processor.

What we collect

• Store data: your shop domain, the owner email Shopify provides, the alert recipient emails you enter, your settings, and your plan.
• Mailstep credentials: the login and password of the Mailstep API user you connect. The password and the session token are encrypted at rest (AES-256-GCM) and never written to logs.
• Order data needed for the checks: order number, created and paid timestamps, financial status, payment method names, shipping method name, order tags, fulfillment state, and the pre-order line-item property you configure.
• Warehouse data from Mailstep: expedition id, status, timestamps, carrier and tracking number.
• Only if you enable the invoice tools: the order's destination country, to detect shipments outside the EU.

We do not collect or store customer names, emails, phone numbers, street addresses or payment details.

Why we process it

Solely to provide the app: comparing your Shopify orders with your Mailstep warehouse, alerting you about problems, and performing the fixes you request. We do not sell data, profile customers, or use data for advertising.

How long we keep it

• Mailstep credentials are deleted as soon as you uninstall.
• Detailed check logs are kept for 30 days; incident and fix history for 12 months.
• All remaining store data is deleted when Shopify sends the shop data-removal request, 48 hours after uninstall.

Security

Data is encrypted in transit (TLS) and at rest. Access is limited to what the app needs to operate. Every change DockGuard makes to Shopify or Mailstep on your behalf is recorded with who triggered it.

Subprocessors

• Railway — application hosting and database (EU region).
• Resend — email delivery of alerts and summaries (EU region).
• Sentry — error monitoring. Reports are scrubbed: no customer data, credentials or tokens are included.
• Cloudflare — DNS and inbound email routing for dockguard.app.
• Shopify — the platform the app runs on.
• Mailstep (Mailship) — the warehouse system DockGuard reads from, using the credentials you provide.

Your rights and contact

Merchants and their customers may request access to, or deletion of, data we process. Shopify's data requests are handled automatically. For anything else, write to support@dockguard.app.