Privacy Policy – ShipBridge: BD Courier Sync

Last updated: 5 November 2026

ShipBridge: BD Courier Sync ("ShipBridge", "the app") is provided by AutoCourier BD ("we", "us"). ShipBridge sends a Shopify store's orders to the delivery couriers the merchant chooses (Pathao and Steadfast) and keeps the Shopify orders up to date with each parcel's status. This policy explains what data the app uses, what it keeps, who it is shared with, and how it is deleted.

Data the app reads from Shopify

• Order details: order number, date, products and quantities, weights, totals, outstanding balance, order note and tags.
• The delivery recipient's name, phone number and shipping address.
• The order's payment and fulfillment status, so the app can show it and update it.

How the data is used

• To create a delivery for an order in the merchant's own courier account, when the merchant sends it or turns on automatic sending.
• To show each parcel's delivery status and update the Shopify order: fulfilled with tracking when sent, paid when delivered, unfulfilled if returned (each can be switched off).
• To show a fraud check: Shopify's own risk assessment, the phone number's format, and that customer's past deliveries from the same store.

Data we store

• Shopify order IDs and order numbers.
• For each parcel: the courier, parcel ID, tracking code, delivery status, the courier's tracking messages, cash to collect and the delivery fee.
• The recipient's phone number for each parcel. It is used only to show that customer's delivery history in the fraud check for the same store, and is never shared with other stores.
• Notes the merchant writes on orders inside the app (these are never sent to couriers).
• The merchant's app settings.
• Courier account details (Pathao login, Steadfast API key and secret key) and Shopify access tokens. Passwords, secret keys and tokens are encrypted with AES-256-GCM.

We do not store customer names, email addresses or shipping addresses. They are read from Shopify when an order is sent and passed straight to the courier.

Who the data is shared with

• The courier the merchant chooses for an order (Pathao or Steadfast), only to deliver that order.
• Our hosting provider, Railway, which runs the app and its database in Singapore.
• Shopify, which handles all billing for paid plans. We never see card details.
• Only if the merchant turns on SMS: SSL Wireless, which receives the customer's phone number and the message text.

We never sell data or use it for advertising. The app loads no analytics, ads or tracking scripts, and its font is served from our own server. Our logs leave out customer phone numbers and email addresses.

Retention and deletion

• When a merchant uninstalls the app, their courier details and Shopify tokens are deleted immediately.
• All other data for that store is deleted when Shopify sends its store data deletion request, 48 hours after uninstall.
• We act on Shopify's customer data requests and customer redaction requests, which remove the order records of that customer's orders.

Contact

Questions or data requests: WhatsApp +60199944971