Privacy Policy

Effective date: August 15, 2026

This Privacy Policy explains how Scalora Systems ("AutoETA," "we," "us," or "our") collects, uses, discloses, retains, and protects information when Shopify merchants install or use the AutoETA application, when buyers view an AutoETA delivery estimate on a merchant's storefront, or when someone contacts us.

AutoETA helps merchants generate delivery estimates from their store's historical order, fulfillment, and shipping performance. Shopify merchants control their stores and are responsible for their own privacy practices. When we process buyer or order information to provide AutoETA to a merchant, we act on that merchant's instructions as its service provider or data processor where applicable.

1. Information We Collect

Information received from Shopify

Depending on the permissions granted by the merchant, AutoETA may receive:

• Shop identifiers, including the shop ID, Shopify domain, store name, timezone, locale, and plan information.
• Merchant account and contact information made available through Shopify.
• Order identifiers, product or variant identifiers, order creation times, fulfillment events, shipment events, delivery events, and related statuses.
• Shipping destination country, state, province, or region codes when required to calculate transit performance.
• App installation, authorization, subscription, and billing status information.

AutoETA does not intentionally request or use buyers' payment-card information, names, personal email addresses, phone numbers, or complete street addresses for its core estimation service. We limit Shopify API requests to the information reasonably necessary to calculate and display delivery estimates.

Information provided directly by merchants

Merchants may provide:

• App configuration, display, product, lane, and estimate settings.
• Manual estimate overrides, fallback ranges, safety buffers, and related preferences.
• Support messages, feedback, contact information, and materials submitted to us.

Technical and usage information

We may automatically collect security and operational information such as IP address, browser or device type, timestamps, app events, error reports, authentication events, and diagnostic logs. We use this information to operate, protect, troubleshoot, and improve AutoETA.

Storefront buyers

The AutoETA storefront widget displays an estimate calculated for the merchant. It is not designed to set advertising cookies, sell personal information, or track buyers across websites. Standard network and hosting services may temporarily process IP addresses, timestamps, and request information for security, abuse prevention, troubleshooting, and reliable delivery of the widget.

2. How We Use Information

We use information to:

• Import and analyze recent order, fulfillment, and shipment history.
• Calculate average processing and transit times and generate estimated delivery ranges.
• Automatically refresh delivery estimates as a merchant's performance changes.
• Display delivery estimates and related verification text on storefront product pages.
• Provide merchant controls, manual overrides, analytics, support, and requested features.
• Authenticate users, maintain subscriptions, prevent abuse, and protect the service.
• Diagnose errors, monitor performance, and improve AutoETA.
• Comply with law, enforce our terms, and respond to valid legal requests.

We do not sell personal information. We do not use merchant customer information for independent advertising, profiling unrelated to AutoETA, or marketing to a merchant's buyers.

3. How We Disclose Information

We may disclose information only as reasonably necessary:

• To the merchant: to provide estimates, reports, settings, support, and other requested services.
• To service providers: to Shopify and to companies that provide infrastructure, hosting, databases, security, error monitoring, communications, or customer support on our behalf. These providers may process information only as needed to perform services for AutoETA and are expected to protect it appropriately.
• For legal and safety reasons: when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, or the integrity of AutoETA.
• For a business transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable confidentiality and notice requirements.
• With consent: when the merchant or relevant individual directs or authorizes us to do so.

4. Data Retention and Deletion

Raw processing and transit observations are kept for up to 120 days after fulfillment or delivery, supporting current estimates and earlier training data for validation. Older cached orders are removed when no retained observation needs them. Scheduled maintenance enforces these limits. Merchant settings and current aggregate estimates remain while the app is installed.

Valid customer-redaction requests delete the linked order and fulfillment records and invalidate estimates derived from them. We retain a minimal shop-and-order suppression record while installed to prevent re-importing erased data. Requested data exports are available only to the authenticated merchant and expire after 30 days.

On receipt of a valid uninstall or shop-redaction webhook, we remove the shop's stored settings, order records, observations, estimates, sessions, and pending exports from the application database. A minimal shop disconnection record prevents delayed background tasks from recreating deleted data. Contact us below for privacy requests.

5. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted network transmission, credential protection, logging, and restricted production access where appropriate. No system is completely secure, and we cannot guarantee absolute security.

6. International Data Transfers

AutoETA and its service providers may process information in countries other than the country in which a merchant or buyer is located, including the United States. Where required, we use legally recognized safeguards for international transfers, such as contractual protections.

7. Privacy Rights and Requests

Depending on location, individuals may have rights to request access to, correction of, deletion of, restriction of, or portability of personal information, or to object to certain processing. A buyer should ordinarily submit a request to the Shopify merchant from whom the buyer purchased, because that merchant controls the store's customer relationship. The merchant can then submit the applicable request to Shopify and AutoETA.

Merchants and other individuals may contact us directly using the information below. We may need to verify identity and authority before fulfilling a request. Applicable law may permit or require us to retain certain information or deny part of a request.

8. Children's Privacy

AutoETA is a business service for Shopify merchants and is not directed to children under 13. We do not knowingly collect personal information directly from children through AutoETA. If you believe a child has provided personal information directly to us, contact us so that we can review and take appropriate action.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes to AutoETA, our practices, or applicable requirements. We will post the updated version at this URL and revise the effective date. If a change is material, we may provide additional notice where required.

10. Contact Us

For questions or privacy requests, contact: