IvoraOrder Sync Watchdog tells a Shopify merchant when a paid order has stayed unfulfilled past the time they chose. This policy describes what the app stores and why. The app is made by Ivora (Ivan Petrus, Ukraine), the controller of the data described here.
What we store
- The shop domain and the date the app was installed or uninstalled.
- For each watched order: its Shopify id, order number, payment and fulfillment timestamps, fulfillment and financial status, and the order total with currency.
- Settings the merchant enters: the alert window in hours, a notification email address, and an optional Slack webhook URL.
- A record that an alert was sent or failed, and the Shopify session token needed to call the Admin API while the app is installed.
We do not store customer names, email addresses, phone numbers, shipping addresses, or line items. Order webhook payloads from Shopify can contain those fields in transit. The app reads only the order fields listed above and does not write the rest to the database.
How we use it
To decide whether a paid order is still unfulfilled, to show it in the app, and to email or Slack the merchant. We do not sell this data and we do not use it for advertising.
Legal basis
We process this data to provide the app the merchant installed and asked us to run, which is the performance of our agreement with the merchant.
Where it lives
The app runs on Google Cloud Run in the United States (us-east1). The database is Neon Postgres in the United States (AWS us-east-2). Alert email is sent through Resend. For merchants in the European Economic Area or the UK, this means data is transferred to the United States; those transfers rely on the providers' standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
While the app is installed. Uninstalling removes the session tokens. Within 48 hours Shopify sends a shop deletion request, and we delete the shop, its orders, its alert log, and its webhook receipts.
While the app is installed, older records are deleted on a schedule: orders that were fulfilled or cancelled after 90 days, the alert log after 90 days, and webhook receipts after 7 days.
A customer data request or customer deletion request has nothing to return or erase, because customer personal data is not stored. We still acknowledge those requests.
Your rights
Depending on where you are, you may have the right to access, correct or delete the data the app holds about your store, and to object to or restrict its processing. Email us to use these rights, or simply uninstall the app to have your store's data deleted as described above. You can also complain to your local data protection authority.
Changes
If we change this policy, we update the date at the top of this page.
Contact
Questions about this policy: support@ivora.life. See also the support page and the terms of service.