Orderfold — Privacy Policy
Last updated: 13 September 2026
Orderfold suggests shipping several orders from the same customer in one
package. This policy explains exactly what the app reads from your store,
what it stores, for how long, and who else can see it.
Roles
You, the merchant, are the data controller for your customers' personal data.
Quiet Tools operates Orderfold as your data processor and acts only on your
instructions, which you give by installing and using the app.
What Orderfold reads from your store
The app queries the Shopify Admin API for a deliberately narrow set of order
fields. It does not request customer names, email addresses
or phone numbers, and cannot read them.
| Data | Why it is needed |
|---|
Order ID and order number (e.g. #1001) | To identify and link orders |
| Customer ID | To group orders placed by the same customer. An identifier only — no name, email or phone |
| Shipping address | To check that two orders go to the same place. Never stored. See below |
| Payment and fulfilment status, currency, total, item count, weight | To decide whether orders can ship together and to show the combined weight |
| Whether a line item has a selling plan | To exclude subscriptions and pre-orders from suggestions |
| Order timestamps | To apply your time-window rule |
| Locations | To fulfil from the correct location |
The shipping address is stored as a hash, not as an address
Orderfold needs to know whether two orders go to the same address. It does not
need to know what that address is. The address is therefore normalised and
reduced to a SHA-256 hash, and only the hash is written to our database. The
address itself is never stored.
What Orderfold stores
- Store record: your
myshopify.com domain, the
access token issued by Shopify, your plan, and your matching rules.
- Order references: the fields listed above, with the
address present only as a hash.
- Suggestions and combines: which orders were grouped, what
happened, the tracking number you entered, and what went wrong if anything did.
- Technical logs: the API calls made during a combine, and
an access log recording which shop data was read or changed and when.
Staff names and email addresses are not stored: the app uses an offline
session, which contains no user profile.
One honest caveat about error messages
Personal fields are stripped from stored API responses before they are written.
Free-form error text returned by Shopify is not parsed, because pattern-matching
a street address out of an arbitrary sentence is unreliable in both directions.
An error message from Shopify may therefore occasionally contain a fragment of a
shipping address. Such logs are deleted after 30 days, and they are the only
place where address text can appear at all.
How long data is kept
- Technical logs, error text and access logs: 30 days,
deleted automatically every night.
- Order references, suggestions and combine history: for as
long as the app is installed.
- After you uninstall: all data for your store is deleted
within 48 hours. The delay exists so that a reinstall within that window does
not lose your history.
Shopify's privacy webhooks
customers/data_request — we hold no personal data of your
customers, so there is nothing to hand over. The request is logged.customers/redact — the order references for that customer are
deleted, including the customer identifier and the address hash.shop/redact — every record belonging to your store is deleted.
Who else processes this data
| Provider | Role | Location |
|---|
| Shopify | Source of the data and host of the admin interface | Per Shopify's own terms |
| Contabo | Server hosting and storage | Germany (EU) |
| Cloudflare | DNS for our domain | — |
Our uptime monitoring receives no store data: it only checks whether the
service answers. Backups are encrypted before they leave the server.
Security
- All traffic is served over TLS.
- The database is not reachable from the internet.
- Backups are encrypted with a key held separately from the backups themselves,
and restores are verified, not assumed.
- The strongest protection is what is not collected: without customer names,
emails, phone numbers or plain-text addresses, a breach of our database
exposes far less than it otherwise would.
Your rights
You can request access to, correction of, or deletion of the data Orderfold
holds about your store at any time by writing to the address below. Uninstalling
the app triggers deletion automatically.
Contact
Quiet Tools — support@quiettools.net
Changes
If this policy changes materially, the updated version is published here with a
new date, and merchants are notified inside the app.