This app helps Shopify merchants export their orders to CSV and XLSX files.
Your app settings, such as the interface language and saved export templates, are stored in your own Shopify store as app-owned shop metafields. They are removed by Shopify when you uninstall the app.
The app's server stores your shop domain, shop name, granted access scopes and an encrypted access token, so it can keep your installation working.
When you install the app, the server also reads the shop owner's email address and your shop's primary language from Shopify and stores them with your installation, together with the date you first complete an export.
The server also keeps a copy of your shop's profile as Shopify provides it, described under "Shop profile and support" below. It is read when you install the app and refreshed once a day while the app is installed.
If you create scheduled exports, the server stores each schedule's settings: name, template, timing, order filters, the optional tag to add to sent orders, and the destination you choose (email addresses, an SFTP server with its login, a Discord webhook URL, a Slack or Telegram bot token with a channel or chat ID, or a Google account you connect). Destinations are stored encrypted; passwords, keys, webhook URLs and bot tokens are never shown again after you save them. For each of the last 50 runs of a schedule the server keeps a history line: when it ran, the order date window, how many rows and orders the file had, how many orders were tagged, and any error. The history never contains order details.
If you connect a Google account to send orders to Google Sheets, the server stores that account's email address and an encrypted Google refresh token, plus the ID and tab name of the spreadsheet the app created for each schedule. The app asks Google only for your email address and the "drive.file" permission, which lets it see and edit only the spreadsheets it creates, never your other Google Drive files. When you disconnect the account, or when your shop's data is erased, the server revokes the token at Google and deletes it.
Each time you complete an export in the app, the server records when it happened, the file format (CSV or XLSX), whether it was the EU VAT report and whether you exported orders you selected. It never records which orders, columns or values were exported. These records are kept for 31 days.
If you use the in-app support chat, the server also stores the messages you send and our replies, linked to your shop domain.
When Shopify sends a privacy request about one of your customers, the server logs that the request arrived, with the customer and order IDs it names but without the customer's name, email or phone.
The app reads your orders, including customer name, email, phone and address, in three situations: inside your browser while you run an export, on the app's server for scheduled exports (described below), and when you use the app's tools in Shopify Sidekick (see "Shopify Sidekick" below). When you run an export in the app, this data is never sent to or stored on the app's server, and it is not shared with anyone. The exported file is created in your browser and saved to your device.
Scheduled exports are the exception, because they run while the app is closed. At the scheduled time the app's server reads the matching orders from Shopify, builds the file in a temporary folder, sends it to the destination you chose (email, SFTP, Discord, Slack, Telegram, or new rows in your Google spreadsheet), and deletes the file right after sending. A schedule that sends to Google Sheets also runs a few minutes after each new order: Shopify tells the server only the new order's ID, and the server then reads and exports that order from Shopify in the same way. If you turn on "Tag orders after they are sent", the server then adds that tag to the orders in the delivered file through Shopify; this needs your permission to edit orders, which the app asks for only when you turn the option on, and it is used for nothing else. Order data is not kept on the server and the file is not stored after delivery. "Resend" in the run history reads the same orders from Shopify again.
If you use Shopify Sidekick in your Shopify admin, Sidekick can use this app's tools to read your last export, your saved and preset column templates, and your recent orders with their line item properties, and to open the app's Orders page or template editor filled in for you to review and confirm. The order details these tools read can include customer information. They are provided to Sidekick only to answer the request you make, and Sidekick is operated by Shopify under Shopify's own terms and privacy policy. The app never changes anything through Sidekick without your confirmation in the app.
The shop owner's email address and your shop's primary language are shared with StoreFleet Support Hub, the support system we operate ourselves, together with your shop domain, shop name, whether it is a development store, when the app is installed or uninstalled, and when you first complete an export. Once a day it also receives counts of how you use the app's features: how many exports you completed in the last 30 days by format and kind, how many templates you saved, how many exports you completed in total, and whether your Google Sheets sync is on and tags orders. These counts contain no order or customer data. We use them only to send service emails about this app: a welcome, setup help, tips, questions about your satisfaction and feedback, a request to review the app, and a short note after you uninstall. The emails are delivered through our email provider, Resend. Development stores are never emailed. You can opt out at any time by replying STOP to any of these emails or by writing to [email protected].
To learn how merchants use the app's pages and improve them, the app may use Microsoft Clarity (Microsoft Corporation) to record heatmaps and session replays of how you and your staff use the app inside your Shopify admin: page views, clicks, scrolling and the app's own interface. Order details, customer information, export previews, connected Google accounts and support chat messages are masked in your browser before anything is sent, so Clarity never receives them. Clarity runs without cookies, and each recording is linked to your shop domain. Microsoft keeps recordings for 30 days, and recordings we mark as favorites, plus a sample Microsoft selects at random, for up to 9 months. Microsoft processes this data as described in the Microsoft Privacy Statement.
When you install the app, and then once a day while it stays installed, the server reads your shop's profile from Shopify, stores it, and sends it to StoreFleet Support Hub, the support system we operate ourselves. The profile contains: the shop owner's name, the shop's email and contact email, the shop name, domains and URL, the store address (street, city, province, postal code and country), the store phone number, the company name and the store's map coordinates (latitude and longitude), the countries you ship to, your time zone, currency, enabled currencies and money formats, weight and unit system, your Shopify plan and whether the store is a development or Shopify Plus store, tax, checkout, customer account and SMS settings, the store description, when the store was created and last updated, the number of products and the primary language. It describes your store only; it never contains your customers or orders. We use it to understand your store when we answer support requests and send service emails.
When a staff member uses the in-app support chat, each message is sent to StoreFleet Support Hub together with that staff member's Shopify user ID, name, email address, language and role (store owner, collaborator or staff), and with your shop domain, shop name, Shopify plan, the access scopes you granted and the date you installed the app, so we know who is asking and can answer them.
The app does not sell any data. Your shop profile and support chat messages, with the staff details described above, are sent to StoreFleet Support Hub, which we operate ourselves. Support chat messages, together with your shop domain and shop name, are delivered to our support team's Slack workspace (Slack Technologies) so we can answer them. Service emails are delivered by Resend, as described above. Scheduled export files are delivered to the destination you configure: by email through our email provider, Resend, to the addresses you enter; to your own SFTP server; to Google Sheets in the Google account you connect (Google LLC); or to Discord, Slack or Telegram (Discord Inc., Slack Technologies or Telegram Messenger), where they are handled under that service's own terms and your workspace's settings. When you use the app's tools in Shopify Sidekick, the data they read is provided to Shopify, as described above. Masked usage recordings of the app's pages are processed by Microsoft Clarity, as described under "Usage analytics". Nothing else is shared with third parties.
When you uninstall the app, its installation is marked as uninstalled and the stored refresh token is discarded. Scheduled exports stop running and the daily shop profile refresh stops as soon as the app is uninstalled; the stored shop profile is kept until the erase below. 48 hours later Shopify asks the app to erase your shop's data, and the server then deletes your installation record, including the stored email address and language, your stored shop profile, your scheduled exports, your connected Google accounts (after revoking their access at Google) and your support chat messages, and asks StoreFleet Support Hub to delete your shop's support conversations.
Questions about this policy, or requests to access or delete your data, can be sent to [email protected].