Legal

Privacy policy

Transparency about the information a shipment-tracking service may process.

Draft — not ready to publish as a final legal policy. This template must be revised to reflect the actual legal entity, data flows, infrastructure, subprocessors, retention periods, applicable jurisdictions, and privacy requests before app launch.

1. About this policy

TrackNest ("we," "us," or "our") is a proposed software product operated by [INSERT LEGAL ENTITY AND BUSINESS ADDRESS]. This draft describes the intended processing activities for our website and future BigCommerce shipment-tracking service. Contact: [INSERT PRIVACY CONTACT EMAIL].

2. Information we may process

When the application is launched, we anticipate processing merchant account information, BigCommerce store identifiers, order and shipment references, tracking identifiers, carrier status events, shipping information necessary to provide the service, and information submitted to our support team. Website analytics and cookie usage will be documented when actually configured.

3. Purposes of processing

Intended purposes include operating connected store accounts, synchronizing shipment details, displaying package progress, maintaining service security, responding to inquiries, providing billing and account administration, and meeting legal obligations.

4. Service providers

We expect to use vetted infrastructure, carrier-tracking data providers, and payment or subscription billing partners. Before launch, this section must identify actual providers, their roles and the relevant data transfers.

5. Data sharing and retention

We intend to share information only as needed to operate and secure the service or as legally required. Specific retention and deletion timelines must be defined and documented before launch, including procedures for merchant uninstallation.

6. Data security

Planned protections include encrypted connections, access controls, tenant isolation, secure authentication, and restricted access to carrier and merchant credentials. A final policy should accurately describe the measures actually deployed.

7. Your privacy rights

Depending on applicable law, users may have rights to access, correct, delete, or restrict processing of personal information. The production service must publish a verified method for submitting privacy requests.

8. International processing

Any international data transfers and related safeguards must be disclosed after the service's real hosting and vendor arrangements are finalized.

9. Changes

We may update this policy to reflect material changes to service functionality or data processing and will publish an updated effective date.

10. Contact

Privacy questions: [INSERT VERIFIED EMAIL ADDRESS].