Privacy Policy

Last updated: October 6, 2026

This policy covers two groups of people: merchants who sign up for AI Dropshipping Hub and connect their own Shopify store, and merchants' customers — the people who buy from those Shopify stores, whose order data passes through our system so we can help fulfil and ship their orders.

1. Who we are

AI Dropshipping Hub (“we”, “us”) is a Shopify app and SaaS platform that helps dropshipping merchants automate product content, catalog sync, and Ukrainian carrier shipping (Nova Poshta, Ukrposhta) for their Shopify store. Each merchant connects their own Shopify store to our app via Shopify's standard OAuth authorization.

2. What data we collect from merchants' customers, and why

To create shipments and calculate delivery cost for a merchant's orders, we read the following from Shopify via the Admin API, for orders placed in the merchant's own store:

Name — recipient name for the shipping label / waybill (TTN).
Phone number — required by Nova Poshta / Ukrposhta to create a shipment and needed for delivery notifications.
Shipping and billing address — city, warehouse/branch, street address, postal code — needed to calculate shipping cost and generate the waybill.
Order contents and value — line items, price, currency — needed for the shipment's declared value and customs data where applicable.

We do not currently request the customer's email address through the Shopify Admin API for order import (it requires a separate Shopify approval we have not yet obtained). Where a merchant's own store setup provides it another way, it may be used to contact the merchant, not the end customer, about data requests.

We do not collect payment card details, government ID numbers, or health data. We do not use this data for advertising, and we do not sell it.

3. What data we collect from merchants

To operate the merchant's own account, we store: the merchant's name and email (for login and support), their Shopify store domain and OAuth access token, and any third-party API keys they choose to connect (AI provider keys, Nova Poshta / Ukrposhta API credentials) — these are encrypted at rest.

4. How we use the data

To create and track shipments with Nova Poshta / Ukrposhta on the merchant's behalf.
To calculate accurate shipping cost at checkout in the merchant's store.
To display the merchant's own orders inside their AI Dropshipping Hub dashboard.
To respond to support requests from the merchant.

We limit our processing to these purposes and do not use customer personal data for anything else, including AI-based content generation — AI features in this app operate only on product data (names, descriptions, images), never on customer personal data.

5. Where the data is stored and how it's protected

Data is stored on servers we control, transmitted only over encrypted connections (HTTPS/TLS).
Customer personal data (name, phone, address, order details) is encrypted at rest in our database.
Access to production systems is limited to essential personnel.
We take regular encrypted backups of the database and retain them for a limited period.

6. Who we share data with

Shopify — the merchant's own store, as part of normal order/catalog sync.
Nova Poshta / Ukrposhta — solely to create and track the merchant's shipments, using the merchant's own carrier account.
We do not share customer personal data with any other third party, and we do not sell it.

7. How long we keep data

We automatically erase the personal fields of an order — name, phone, address — 24 months after the order date; the order record itself (amount, status, date) is kept for the merchant's own accounting history. If a customer's data deletion is requested through Shopify (a customers/redact request), we erase the corresponding personal fields immediately, on request, rather than waiting for this period. If a merchant disconnects their store or their account is closed, the associated store data is deleted.

8. Your rights

If you are a customer of a store using AI Dropshipping Hub and want to know what data we hold about you, or want it deleted, please contact the merchant you ordered from — they are the data controller for their own store. We respond to Shopify's official customers/data_request and customers/redact webhooks automatically: we notify the merchant of what we hold, or erase it, on request.

If you are a merchant and want to export or delete your account data, contact us using the details below.

9. Changes to this policy

We may update this policy as the app's functionality changes (for example, if we later gain Shopify's approval to also process customer email addresses). Material changes will be reflected by updating the date at the top of this page.

10. Contact us

Questions about this policy or a data request: [email protected], or use the contact form on our site.