Privacy policy for the Shopify and Wix apps
In short
- The apps run on our server in Germany. It reads your orders to check them and to create the upload file for Swiss Post, but it does not store the names and addresses of your customers.
- The tariff suggestion service receives product data only, never customer data.
- You pay for the app through Shopify or Wix. We do not receive payment details.
- When you uninstall the app, we delete the access tokens at once and the data of your shop after Shopify's deletion request.
1. Controller
TecMinds GmbH
Neustadtstrasse 8a
6003 Lucerne
Switzerland
Email: hallo@zollfertig.ch
Write to this address with any question on data protection.
2. How the apps work
The Zollfertig apps for Shopify and Wix do not run in your shop but on our server, hosted by netcup GmbH, Emmy-Noether-Strasse 10, 76131 Karlsruhe, Germany. They access your shop through the Shopify or Wix API with the permissions you grant on installation.
Order data: When you open the orders or create an upload file, our server reads the open international orders from your shop: name, address, phone number and email address of the recipient, items, quantities, values and weights. It checks them and creates the upload file for Swiss Post. The file is kept in memory for 15 minutes so you can download it, then it is deleted. We do not store the names, addresses or contact details of your customers. We only store which order (order number and internal ID) went into an upload file and when, so that no shipment is uploaded twice.
Tracking numbers: Our server reads the return file of Swiss Post in memory and adds the tracking numbers to the orders in your shop. We do not store the file.
What we store: the address of your shop, the API access tokens (encrypted), your settings with the sender details and, for Wix, the customs data of your products. On Shopify the customs data are stored in your shop.
Your customers' data: You are responsible for the data of your customers. We process them only on your behalf and only to provide the functions of the app (processing on behalf). On request we conclude a data processing agreement with you.
Uninstalling: When you uninstall the app, we delete the access tokens immediately. On Shopify we delete all data of your shop 48 hours later, when Shopify sends the shop deletion request. On Wix we delete them on uninstall, except the customs data of the products: they contain no personal data and are kept for a later reinstall; we delete them on request. If a customer asks Shopify to delete their data, we delete the entries for their orders.
Billing: You pay for the app through Shopify or Wix. We only receive the plan and the status of the subscription, no payment details.
Logs: The server logs technical details such as time, function called, platform, result and duration, but no data of your customers.
The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR) and, for your customers' data, your instructions.
3. Tariff suggestions (AI)
Tariff suggestions are optional. They run only when you click «Suggestion» for a product. Our server then reads the product name, description, categories and attributes from your shop and passes them to the language model Claude by Anthropic, PBC (USA) (Anthropic's privacy policy). No customer data are sent. Please do not put personal data into product descriptions.
The service logs technical details such as time, language, duration and number of suggestions, but no product data. Only when we temporarily switch on extended logging to find an error are product data logged too.
4. Transfers abroad
Anthropic may process data in the USA. We rely on a certification under the Data Privacy Framework (Swiss-U.S. and EU-U.S.) where available, or on standard contractual clauses.
5. Retention
We keep personal data only as long as needed for the purpose. Business records are kept for the statutory period of 10 years (Art. 958f Swiss Code of Obligations).
6. Your rights
You can request access to your personal data and their correction, deletion or a copy. You can object to processing and withdraw consent. Write to hallo@zollfertig.ch.
You can lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC). If you live in the EU, you can also contact the supervisory authority of your country.
7. Changes
We update this policy when our processing changes. The version published here applies.