The short version
The app is a dispatcher. It reads an order, works out which of your outlets should make it, and books a rider. To book that rider it has to pass on who the parcel is for and where it is going — there is no way to deliver a parcel without telling somebody the address.
What it does not do is keep that information afterwards. Once a delivery has been requested, the customer's name, phone number and address are gone from our side. What remains is the Shopify order number, the delivery status, and the rider's details — enough to show you a timeline, not enough to identify your customer.
We are uEngage Services Private Limited, an Indian company. For the data described here, you are the controller and we are the processor: it is your customers' data, collected through your store, handled on your instructions to carry out a delivery you asked for.
Your customers' data
When an order is dispatched, the app reads the following from Shopify and sends it to the uEngage delivery network:
- Customer name and phone number — the rider calls that number on arrival.
- Delivery address, and its coordinates — riders navigate to coordinates, not to address text.
- Order value, and whether it is cash on delivery — so the rider knows how much to collect.
- The order number, which is what a rider quotes when they call you about a specific delivery.
None of the first three are written to our database. They are read from Shopify at the moment of dispatch, used to create the delivery, and not retained. If a delivery has to be retried or sent out again, the order is read from Shopify afresh rather than replayed from a stored copy.
What we do store against an order, and keep:
- The Shopify order ID and order number.
- Delivery status and its full history, along with any error, so you can see what happened and when.
- The rider's name, phone number and last reported position, and the tracking link — these describe the rider, not your customer.
- Which outlet dispatched, how far it was, and the quoted delivery charge.
Addresses that have to be looked up are cached as a one-way hash of the address alongside its coordinates, so the same address is not paid for twice. The hash cannot be turned back into an address and is not linked to an order, a customer or a store.
We do not profile your customers, build audiences from them, sell or rent any of this data, or use it to train machine learning models. It is used to complete the delivery you asked for, and for nothing else.
Your data
As the merchant, rather more is stored, because the app has to be configured:
- Your store domain and Shopify access token, so the app can act on your store.
- Name and email of the staff who use the app, as supplied by Shopify when they sign in.
- Your outlets — name, address, coordinates, contact number and opening hours.
- Your uEngage store ID and access token, and your Google Maps key if you provide one. Both tokens are encrypted before they are written down and are never displayed again after saving.
- The details you give when you first install — business name, contact name, email, phone and city — so our team can reach you about setting the account up.
How long it is kept
Delivery records are kept while the app is installed, so that your order history and your spend stay visible to you.
When you uninstall, everything tied to your store is deleted — configuration, outlets, credentials, delivery records and their status history. Shopify notifies us 48 hours after an uninstall and the deletion runs then. Nothing is kept back as a backup copy beyond the rolling backups of the database itself, which age out on their own schedule.
How it is protected
- Everything travels over HTTPS, both to Shopify and to the delivery network.
- Delivery credentials and map keys are encrypted at rest with AES-256, under keys held separately from the database.
- Each store's data is reachable only through that store's own authenticated Shopify session.
- Errors and logs are stripped of anything credential-shaped before they are written.
No system is perfect. If we ever discover a breach affecting your data, we will tell you and the relevant authorities as the law requires.
Requests and deletion
If one of your customers asks you for a copy of their data, or asks you to erase it, you can answer for this app directly: it holds no personal data about your customers beyond what is described above, so there is nothing to export and nothing to erase. We respond to Shopify's data-request and redaction webhooks on that basis, and log every one.
For your own data as a merchant — access, correction or deletion — write to us at the address below. Uninstalling the app achieves deletion on its own.
Changes
If this policy changes in a way that affects what is collected or who it goes to, the effective date at the top changes and we notify installed merchants by email. Minor wording fixes will not.
Contact
uEngage Services Private Limited
rahul@uengage.in
Questions about a specific delivery are usually faster through your uEngage account manager, quoting the Shopify order number.