Privacy Policy

Introduction

IPK Logistics ("we", "our", "the app") is a SaaS app that integrates with WooCommerce through a connector plugin. It helps merchants manage warehouse operations including bin locations, picking rounds, and order fulfillment. This Privacy Policy explains what data we collect, how we use it, how long we keep it, and what happens when you cancel your subscription.

Data We Collect

Merchant and Staff Data (from WordPress Authentication)

When you install the integration plugin and connect your store, we receive authentication data for API purposes:

• Store domain (e.g. your-store.com)
• Admin user first name, last name, and email
• User ID
• API keys for secure communication

This data is used solely for authenticating API requests on your behalf.

Operational Data (created by app usage)

As you use the app, we store operational data needed to run the service — including your shop configuration, picking rounds, order references, fulfillment records, purchase orders, receiving records, and container assignments. This data contains WooCommerce order IDs and order numbers but does not include any customer personal information.

Supplier and Purchase Order Data (created by app usage)

When you create purchase orders, we store the supplier and purchasing information you enter in the app, such as supplier name, supplier contact details, internal reference number, expected date, payment terms, shipping carrier, tracking number, shipping cost, and purchase order items. This information is used to manage supplier orders, receive stock, and keep inventory workflows accurate.

Product Data (read-only, not stored)

During picking and fulfillment, the app reads product information (titles, SKUs, barcodes, images) from WooCommerce in real time. This data is displayed in the app but is never stored in our database.

Fulfillment Tracking Information (not stored)

When you fulfill a customer order, tracking details are sent directly to WooCommerce. We do not store customer order tracking numbers or carrier information.

Data We Do NOT Collect

We do not access, collect, or store any personal data belonging to your customers — including names, emails, phone numbers, addresses, or payment information.

Our API permissions are limited to order processing and product management. We do not request or use any customer data scopes.

How We Use Your Data

We use your data exclusively to provide the app's core functionality — authentication, subscription management, warehouse operations (picking rounds, fulfillments, bin locations), supplier purchase orders, stock receiving, and container tracking.

We do not sell, share, or transfer your data to any third parties. We do not use your data for analytics, marketing, or any purpose beyond delivering the service.

Data Retention

• Active operational data (picking rounds, fulfillments, purchase orders, receiving records, containers): retained for 6 months from creation. After 6 months, data is available for download before deletion.
• Shop configuration: retained as long as your subscription remains active. After subscription cancellation, the shop record is kept for billing audit purposes with no operational data attached.
• Session data: deleted immediately after subscription cancellation.

What Happens When You Cancel

When you cancel your IPK Logistics subscription:

1. Immediately deleted: All authentication sessions and credentials are permanently removed.
2. Deleted within 48 hours: All operational data is permanently deleted.
3. Kept for audit: Only subscription and billing records are retained for accounting compliance.
4. Remains in your WooCommerce store: Bin location custom fields on your products belong to you and are not deleted. They survive integration plugin uninstallation.

GDPR Compliance

We comply with all GDPR requirements:

• Customer data requests and erasure: Since we do not store any customer personal data, there is nothing to return or delete.
• Shop data erasure: Upon request, we permanently delete all operational data associated with your store.

Data Security

• All data is encrypted in transit (HTTPS/TLS) and at rest
• API keys are stored securely with automatic rotation
• All webhook requests are verified using cryptographic signatures