Orbi Tracking privacy policy

Last updated 4 November 2026 · Scalechart LLC

Orbi Tracking is order tracking for Shopify stores: a branded tracking page and live delivery status for every parcel. This policy explains what data the app collects when a merchant installs it, how we use it and who we share it with. Scalechart LLC is the data processor; the merchant is the controller of their customers' data.

Data we collect

• Store details (domain, name, language) and the store's plan.
• For each shipped order: order number, the customer's email and first name, delivery country, tracking numbers and carrier.
• Tracking scans for those parcels from carriers and tracking providers.

How we use it

• To show customers where their order is on the store's tracking page, which only opens with the order number and matching email or a private tracking link.
• To show the merchant the status of their shipments and to bill the store per tracked order.
• To show the parcel's status on Shopify's order status and thank-you pages (no tracking numbers, addresses or items are shown there), and on a 'Track orders' page in the customer's own Shopify account, listing only that customer's orders.
• When the merchant turns them on: to tag orders by delivery status, to add carrier scans to the order in Shopify, to start the merchant's Shopify Flow workflows.
• To show an estimated delivery date on product pages, worked out in the visitor's browser from their country. Nothing about the visitor is stored. The settings for this are kept as app data in the merchant's Shopify store.
• To count tracking page visits, lookups and clicks for the merchant's analytics. Only totals per day are kept, nothing about the visitor.

We never sell personal data and never use one store's data for another store.

Who we share it with

• Tracking providers Ship24 and Track123, which receive tracking numbers and the destination country only, never names or email addresses.
• Orbi Send, our email app, only when the merchant has installed it: the parcel status, tracking link, the customer's email address and first name, so it can send the merchant's shipping update emails. Nothing is shared with Orbi Send for stores that don't use it.
• OpenAI, only when a store uses a language other than English: the wording of local carrier scans, to translate it. No order numbers, emails or names are sent.
• The merchant's own PayPal or Stripe account, only when the merchant connects it: tracking numbers and carrier for orders paid that way, and for Stripe the shipping name and address, so disputes see the shipment.
• Webhook addresses the merchant adds: each shipment's order, tracking number, status and tracking link, signed with the merchant's secret.
• Apple, only when a customer adds a parcel to Apple Wallet: we keep that device's push token to update the pass and delete it when the parcel or store is deleted.
• The merchant's own tools that hold an API key the merchant created (for example Gorgias or Zendesk): the same shipment data as webhooks.
• Shopify Flow in the merchant's own store, when they build a workflow on our trigger: order, status, tracking number, carrier and tracking link.
• Fly.io for hosting and our database.

Retention and deletion

Data is kept while the app is installed. When a merchant uninstalls, we stop processing and delete the store's data within 48 hours of Shopify's shop redaction request. Customer data is deleted or anonymised when Shopify sends a customer redaction request, and we answer customer data requests through the merchant.

Security

Data is encrypted in transit (TLS) and at rest, access is limited to the staff who need it, and the app only requests the Shopify access it uses.

Your rights

Customers can exercise their GDPR and CCPA rights through the store they bought from. Merchants can contact us at support@scalechart.app.

Contact

Scalechart LLC · support@scalechart.app