Privacy policy

Effective October 16, 2026

ShipNexIQ helps Canadian Shopify brands choose a carrier for each order and report on delivery cost, service and estimated emissions. This policy explains what we collect, why, where it is kept and the choices you have. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

In short: we collect as little as we can, we keep it in Canada where possible, we never sell it, and we never use it for advertising. For orders, we store the destination postal code and city, not customer names, emails or phone numbers. If a merchant buys labels through us, the recipient details go straight to the carrier and the label is deleted after 30 days.

1. Who this applies to

Website visitors to ShipNexIQ's website.
People who request a shipping baseline through our website form.
Merchants who install the ShipNexIQ app on their Shopify store, and their staff.
Shoppers whose orders pass through a merchant's store that uses ShipNexIQ. For this data the merchant decides how it is used, and we process it on the merchant's behalf.

2. Website visitors

Our website does not use cookies, analytics or advertising trackers. Like any website, our hosting provider records technical request logs (such as IP address, browser type and time of request) to keep the site running and secure. Those logs are kept for a short period and are not used to identify you.

Your browser loads fonts from Google Fonts and a graphics library from cdnjs (Cloudflare). Those providers receive your IP address when the files load, under their own privacy policies.

3. Baseline requests from our website

When you submit the "Request my baseline" form we collect your name, brand, work email, approximate parcels per month and the carriers you use. We use it only to reply to you and to prepare your baseline.

It is stored in our database in Toronto, Canada.
We use an email delivery service (Resend, based in the United States) to send ourselves a notification of your request, so your details pass through that service.
We keep it until you ask us to delete it, or for up to 24 months after our last contact with you.

4. Merchants who install the app

What we collect

Information	Why
Store domain and name; the Shopify staff account ID of people who open the app	To run the app for your store and control who can approve or change routing
Shopify access token	To read orders and locations. Stored encrypted.
Store locations (name, postal code, province)	To rate parcels from the right origin
Carrier rate cards, rules and any carrier API credentials you add	To compare carriers. Credentials are stored encrypted with a separate key.
Invoice and tracking files you upload	To measure real cost, on-time and first-attempt delivery

Order information

For each order we read and keep only what rating and reporting need:

order number, date, order value and shipping charged;
destination postal code, city, province and country;
whether the shipping address includes a company name (used only to treat it as a business or residential delivery);
item weights and the fulfilling location;
after shipping: the carrier, tracking number and delivery status.

We do not store shoppers' names, email addresses, phone numbers or street address lines in order data. Shopify may include extra fields in some notifications it sends us; we discard them on receipt and do not store them.

Live carrier rates and labels

When a merchant connects a carrier or rate service, some carriers need the destination street address to quote a price. We read it from Shopify at the moment of rating, send it to that carrier, and do not store it.

When a merchant chooses to buy labels through ShipNexIQ, we read the shopper's name, street address and phone number from Shopify at that moment and send them to the carrier the merchant picked, because a carrier cannot deliver a parcel without them. We do not store them in our database. The label file the carrier returns (which shows the recipient's name and address) is kept for up to 30 days so the merchant can reprint it, then deleted automatically. It is also deleted when Shopify asks us to erase a shopper's data.

How we use it

To recommend a carrier for each order, apply the merchant's rules, record approvals and overrides, and produce reports on cost, delivery performance and estimated emissions. In live mode, and only when the merchant turns it on, we add a routing tag to the order in Shopify, or send shipment details to the carrier the merchant has connected so a label can be created.

We do not sell personal information, use it for advertising, or share a merchant's data with carriers or other merchants. We may use aggregated figures that cannot identify a merchant or shopper (for example, average transit days by region) to improve the service.

5. Where data is stored and who processes it

Provider	Purpose	Location
Fly.io	Application hosting and database	Toronto, Canada
Shopify	Source of store and order data	Per Shopify's policy
Resend	Notification emails for website requests	United States
Carriers the merchant connects (for example Canada Post, Purolator, UPS, FedEx, DHL Express, UniUni)	Rates, labels and tracking, at the merchant's instruction	Varies by carrier; several process data in the United States
Shipping platforms the merchant connects (EasyPost, ShipEngine, Freightcom, Stallion Express)	Rates, labels and tracking with the carriers on the merchant's account with them	Canada or United States, per the platform

Where a provider stores or accesses data outside Canada, that data may be subject to the laws of that country.

6. Security

Connections use HTTPS. Shopify access tokens and carrier credentials are encrypted at rest with separate keys. Messages from Shopify are verified before they are processed. Access to production systems is limited to the people who run ShipNexIQ.

7. Retention and deletion

We keep a store's data while ShipNexIQ is installed.
When a merchant uninstalls the app, Shopify notifies us about 48 hours later and we delete that store's data.
Label files are deleted 30 days after they are created.
When a shopper's data must be erased, Shopify tells us; we reduce the stored postal code for their orders to the first three characters (a broad area), remove the city and delete any stored labels.
When a shopper asks a merchant what data is held about them, we give the merchant what we store for those orders.
A merchant can ask us to delete their data at any time.

8. Your choices and rights

You can ask to see the personal information we hold about you, correct it, or withdraw your consent and have it deleted, subject to any legal requirement to keep it. Shoppers should contact the store they ordered from, since the store controls their order data. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

9. Changes

We will update this page when our practices change and change the effective date above. If a change materially affects merchants, we will tell them in the app or by email.

10. Contact

To ask a question or make a request, email us at team@shipnexiq.com, or use the contact form on our website and mention "privacy".