Privacy Policy

Commercive LLC ("Commercive," "we," "us," or "our") provides a fulfillment service for Shopify merchants. This Privacy Policy explains what information we collect when you install or use our Shopify application and dashboard, how that information is used, with whom it is shared, and the rights you have over it.

1. Information we collect

Shopify store data. When you install our app, Shopify grants us access (under scopes you approve) to data required to operate fulfillment, including: orders and line items, fulfillments and tracking, customer names and shipping addresses, products and variants, inventory levels and locations, refunds, and draft orders.

Account data. When you or your team members sign in, we store your email address, display name, hashed password (we never store plaintext passwords), and your role within your organization.

Usage and operational logs. We record application events such as API requests, error traces, and audit entries (for example, which user created an inbound shipment). These logs may include IP address, user agent, and timestamps for security and debugging purposes.

2. How we use information

We use the data above solely to operate the fulfillment service: routing orders to our China-side warehouse teams, generating shipping labels through carriers, exposing live dashboards and analytics to merchants, sending operational notifications, billing for services rendered, preventing abuse, and complying with legal obligations. We do not sell personal data and we do not use merchant or end-customer data to train machine-learning models for third parties.

3. Sub-processors and sharing

To deliver the service we share the minimum necessary data with vetted sub-processors, including: shipping carriers (for example, Yun Express and any additional carriers you enable), payment processors (for billing of our services), cloud hosting and database providers, error-monitoring providers, and transactional email providers. We do not share your data with advertisers or data brokers. A current list of sub-processors is available on request to support@commercive.co.

4. Data retention

Operational data (orders, fulfillments, inventory snapshots) is retained while your shop is connected and for ninety (90) days after you uninstall the app, after which it is deleted from production systems. Billing-related records (invoices, transaction history) are retained for seven (7) years to meet tax and accounting requirements. Account credentials are deleted within thirty (30) days of account closure. Backups are rotated and aged out within ninety (90) days.

5. Your rights

Depending on where you or your customers reside, you may have rights to access, correct, export, or delete personal data we hold, and to object to or restrict certain processing. Merchants can exercise these rights, or submit requests on behalf of their end customers, by emailing support@commercive.co. We respond to verified requests within thirty (30) days. For Shopify merchants, we also honor the standard Shopify GDPR webhooks (customers/data_request, customers/redact, and shop/redact).

6. Security

Data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256 on managed database and object storage providers. Access to production systems is restricted to a small number of authorized engineers, gated behind SSO and hardware-backed multi-factor authentication. Passwords are stored as bcrypt hashes. We log administrative actions and review them periodically.

7. International transfers

Commercive operates with teams in the United States and China and uses cloud infrastructure primarily located in the United States. Where personal data of EU or UK residents is transferred outside their region, we rely on Standard Contractual Clauses and equivalent safeguards. Merchants who require a signed Data Processing Addendum may review and request one on our DPA page.

8. Children

The service is intended for businesses and is not directed to children under sixteen. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified to connected merchants by email at least fourteen (14) days before they take effect. The "Last updated" date at the top of this page indicates the most recent revision.

10. Contact

Questions, complaints, or data-subject requests can be sent to support@commercive.co. You can also reach us by mail or phone:

Commercive LLC
595 West Broadway
Cedarhurst, NY 11516
United States
Phone: 631-954-1485