Last updated: May 2026
What we collect
Hailship is a Shopify app that connects merchants to last-mile delivery carriers. To provide the service, we receive and store:
- Shop information from Shopify (shop domain, access token, scopes).
- Configuration the merchant enters (pickup address, contact info, carrier API credentials, pricing rules).
- Rate request logs at checkout: destination ZIP, carrier name, quoted price, response time. We do not log customer names, addresses, emails, or phone numbers as part of these logs.
- Order records when a delivery is dispatched: Shopify order id and the delivery address (passed to the carrier). The delivery address is removed if Shopify sends a customer-redact webhook.
What we don't collect
We do not collect customer identifiers (names, emails, phone numbers) beyond what's needed to dispatch a delivery, and we don't sell or share data with third parties for marketing.
Carrier data sharing
When a customer is quoted or a delivery is dispatched, we forward the pickup and delivery addresses, contact phone, and item descriptions to the carrier API the merchant has configured (Roadie, Uber, DoorDash, GoShare, Frayt, or Relay). Each carrier's privacy policy applies.
Data security
Carrier API credentials are encrypted at rest with AES-256-GCM using a key held outside the database. All transport is over HTTPS.
Data retention & deletion
On uninstall, sessions are removed immediately. 48 hours after uninstall, Shopify fires a shop/redact webhook and we delete all merchant data within 30 days. Customer-redact requests are honored within 30 days.
Contact
Questions: info@hailship.app