Privacy Policy for Box-Smart

Last updated: 1/14/2026

Introduction

Box-Smart ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information when you use our Shopify application.

Information We Collect

When you install and use Box-Smart, we collect the following information:

• Shop Information: Store domain, settings, and configuration data
• Product Information: Product dimensions and packaging box configurations
• Order Information: Order IDs and packaging assignments (no customer personal data)
• Session Data: Authentication tokens for secure app access

How We Use Your Information

We use the collected information to:

• Provide packaging optimization services
• Calculate the best box sizes for orders
• Store your packaging preferences and settings
• Maintain secure authentication sessions
• Improve our service and features

Data Storage and Security

Your data is stored securely in our database with the following measures:

• Encrypted data transmission using HTTPS
• Secure authentication via Shopify OAuth
• Regular security updates and monitoring
• Data isolation per shop installation

Data Sharing

We do not sell, trade, or share your data with third parties except:

• With Shopify, as required for app functionality
• When required by law or legal process
• To protect our rights and safety

Your Rights (GDPR Compliance)

You have the following rights regarding your data:

• Access: Request a copy of your data
• Correction: Update incorrect information
• Deletion: Request removal of your data
• Portability: Receive your data in a portable format

Data Retention

We retain your data for as long as you use Box-Smart. Upon app uninstallation:

• Shop data is deleted within 30 days
• We comply with Shopify's mandatory webhook requirements
• Backups are purged according to our retention policy

GDPR Webhooks

We implement Shopify's mandatory GDPR webhooks:

• Customer Data Request: We provide any stored customer data upon request
• Customer Redact: We delete customer data when requested
• Shop Redact: We delete all shop data 48 hours after uninstallation

Children's Privacy

Box-Smart is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this privacy policy periodically. Changes will be posted on this page with an updated revision date.

Contact Us

If you have questions about this privacy policy or your data, please contact us through the Shopify App Store support channel.

Legal Basis for Processing

We process your data based on:

• Your consent when installing the app
• Contractual necessity to provide our services
• Legitimate interests in improving our service
• Legal obligations under applicable laws