Space3PL Connect — Privacy Policy

Last updated: June 21, 2026

Space3PL Connect (the "App") is provided by Space3PL ("we", "us", or "our"). The App connects a Shopify store to the Space3PL warehouse management and fulfillment platform (the "Space3PL Platform") so that we can provide third-party logistics (3PL), warehousing, order fulfillment, and delivery services to merchants.

This Privacy Policy describes how personal information is collected, used, and shared when a merchant installs or uses Space3PL Connect in connection with their Shopify store.

Personal Information the App Collects

When you install the App, we are able to access the following types of personal information from your Shopify account through Shopify's APIs and webhooks.

Information about you and your store staff. When you authenticate and install the App, we collect account information made available by Shopify, which may include your name, email address, preferred language (locale), whether you are the store account owner or a collaborator, your Shopify user ID, your store (shop) domain, the OAuth access token issued for your store, and the list of permissions (scopes) you grant to the App.

Information about your store. We collect your shop name, shop ID, shop contact email, and the API permissions granted to the App.

Information about your store's orders, products, and customers. To provide fulfillment services, the App reads and receives data from your store. This data may include personal information about your store's customers, such as:

Customer name, email address, and phone number
Shipping and billing addresses
Order details, including line items, quantities, prices, and order notes
Gift-wrap messages and recipient details, where used
Fulfillment, shipment, and tracking details
Return requests and related details
Product and inventory information

The App accesses this data using the permissions you grant during installation, which currently include access to orders, products, inventory, locations, fulfillments and fulfillment orders, returns, customers (read-only), cart transforms, and publications.

The App is installed and used inside the Shopify admin by merchants and their staff. The App does not collect personal information directly from your store's shoppers and does not use cookies or tracking technologies to track your store's visitors. We receive customer personal information only as part of the order, fulfillment, and return data that Shopify sends to the App.

How the App Collects Personal Information

We collect the information described above in the following ways:

Installation and authentication. When you install the App, we use OAuth to securely connect to your Shopify account.
Shopify webhooks. The App subscribes to Shopify webhooks and receives event notifications relating to orders, products, inventory levels, fulfillments, fulfillment orders, returns, and App lifecycle events (such as installation and uninstallation).
Shopify Admin API. The App reads and writes the data needed to receive, store, pick, pack, ship, and return your orders.

How We Use Your Personal Information

We use the personal information collected through the App in order to:

Provide warehousing and order fulfillment services on your behalf, including receiving, inventory management, picking, packing, shipping, and processing returns
Synchronize orders, products, inventory levels, and fulfillment and tracking status between your Shopify store and the Space3PL Platform
Generate shipping documents and arrange delivery of orders, including last-mile delivery
Provide, maintain, support, and improve the App and the Space3PL Platform
Communicate with you about the App, respond to your requests, and provide customer support
Detect and prevent fraud or abuse, comply with our legal obligations, and enforce our agreements

How We Share Your Personal Information

We share personal information with the following recipients in order to operate the App and provide our services:

The Space3PL Platform. The App forwards the order, product, inventory, fulfillment, and return data described above to the Space3PL Platform, hosted at nova.space3pl.com, where it is processed to fulfill and manage your orders.
Logistics and delivery partners. We share the information needed to deliver orders with our delivery operations and with shipping carriers and couriers (for example, recipient name, address, and contact details).
Service providers. We share information with the hosting, database, and infrastructure providers that operate our systems on our behalf, subject to appropriate confidentiality and data-protection obligations.
Shopify. We exchange data with Shopify through its APIs as required to provide the App.
Legal and compliance. We may share personal information to comply with applicable laws and regulations, to respond to a lawful request, or to protect our rights, property, or safety and those of others.

We do not sell your personal information, and we do not use personal information collected through the App for behavioral advertising.

Your Rights

Depending on where you are located, you may have rights under applicable data protection laws, including the right to access, correct, update, or request deletion of your personal information. To exercise these rights, contact us using the details in the "Contact Us" section below.

Because the App processes your store's data on your behalf, you (the merchant) are the controller of your customers' personal information, and we act as a data processor or service provider. Requests from your store's customers should be directed to you as the merchant, and we will assist you in responding to them.

To support compliance, the App implements Shopify's mandatory privacy webhooks:

Customer data request (customers/data_request). When Shopify notifies us that one of your customers has requested their data, we will make available to you the information we hold about that customer so you can respond to the request.
Customer redaction (customers/redact). When Shopify notifies us that a customer's data should be erased, we delete the associated personal information from our systems, except where we are required to retain it by law.
Shop redaction (shop/redact). When you uninstall the App and Shopify requests erasure of your store's data, we delete your store's data, including session credentials and App records, from our systems, except where we are required to retain it by law.

If you are located in the European Economic Area, the United Kingdom, or another region with data-protection laws, please note that your information may be transferred to, stored, and processed in countries outside of your own, including in jurisdictions that may have different data-protection rules than your country.

Data Retention

We retain personal information for as long as necessary to provide the App and our fulfillment services to you, to operate and audit our systems, and to comply with our legal, accounting, and reporting obligations. When you uninstall the App, we delete the session credentials and App-specific data associated with your store. Following a verified shop redaction request, we delete your store's data from our systems, retaining only what we are required to keep by law, after which it is deleted or anonymized.

Data Security

We take reasonable measures to protect personal information, including verifying the authenticity of incoming webhooks, encrypting data in transit using HTTPS/TLS, restricting access to authorized personnel, and securely storing access credentials. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. When we do, we will revise the "Last updated" date at the top of this page.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a request or a complaint, please contact us by email at support@space3pl.com.