Privacy policy

Effective October 23, 2026. ParcelWeather is operated by TMK Consultoria Ltda. Contact contato@terosmk.com.br for support or privacy requests.

Information used by the app

After a merchant installs the app in Shopify, we access the order and fulfillment information needed for shipping checks: order identifiers, status, product tags and remaining quantities, city, state, country, ZIP code, destination coordinates, shipping service, and expected delivery dates. We use the configured Shopify shipping location and its coordinates to check origin weather.

The Shopify integration does not request customer names, email addresses, phone numbers, or street addresses. The app stores packing profiles, transit rules, order shipping overrides, merchant-confirmed delivery dates, and the review notes merchants enter. Enter packing details only in those notes.

We retain encrypted Shopify access tokens to authenticate the app and its background worker. Staff authorization includes a Shopify staff identifier and effective permissions; staff names and email addresses received during authentication are discarded.

Packing-slip notes

If you enable packing-slip instructions, we read the order note to preserve its existing text and update only the labeled ParcelWeather section. That section contains packing recipes, applicable manager instructions, check times, and warnings. Existing Shopify order-note text is processed temporarily and is not retained in our database or sent to NWS. In Preview mode, the full note is fetched only when you open it; no order updates are sent to Shopify. The section is removed from accessible orders during a check after you disable the setting. It may remain in Shopify after uninstalling or when an order becomes inaccessible.

Weather provider and service providers

We send coordinates rounded to two decimal places to the US National Weather Service to request forecasts and alerts. Order identifiers, customer names, contact details, and packing notes are not sent to NWS. NWS operates its service under its own policies.

The production app and database are hosted on Railway. Our service providers process information to operate the app. We do not sell customer information or use it for advertising. Data may be processed outside the merchant’s country.

Purpose and retention

We use this information to assess shipping weather, display packing instructions, write optional weather status tags, manage explicitly enabled fulfillment holds, maintain activity records, verify app subscriptions, count included weather checks, and respond to data requests. Shopify processes subscription payments. To avoid counting an order twice, we retain a keyed fingerprint of its identifier and the period in which it was checked; these billing records contain no customer names or addresses.

Open order records are refreshed from Shopify and removed when a completed synchronization shows they are no longer accessible unfulfilled orders. Forecast caches expire within 30 minutes; active-alert caches expire within five minutes. Webhook delivery records are retained for seven days. Activity records are retained for 90 days. Order-allowance records are removed 90 days after their period ends. Completed customer data requests are removed after 30 days.

When we receive Shopify’s uninstall or shop-redaction webhook, we delete the shop’s retained order data, configuration, review notes, allowance records, pending requests, and authentication sessions from the active database. Customer-redaction webhooks delete the specified order records and their retained billing fingerprints. Aggregate allowance totals contain no customer identifiers. The production database is backed up daily. Those backups are retained for six days; deleted records may remain in a restricted backup until it expires. If a backup is restored, we reapply recorded deletion requests before reopening the app.

Security and access

We encrypt retained order snapshots, coordinates, review notes, customer-request payloads, and authentication tokens. Access to the embedded app requires Shopify authentication. A shop can access only its own app records. Connections to the production app use HTTPS.

Merchants can review pending Shopify customer data requests in Help and privacy, export retained records, and deliver them through their verified support process. Contact us to request access, correction, or deletion of information held by the app. We may need to verify that the request is authorized.

Updates

We update this policy when the app’s data practices change and publish the effective date here. Material changes affecting installed shops will be communicated through the app or the merchant’s verified support channel.