Back

Privacy policy

Marlo: AI Order Tracking (t2) is operated as part of Listing Core. This page is the public policy merchants can link from an app listing.

What we collect

Stores the shop domain, offline access token, billing tier, and a minimal order record (order id, source tag, totals, opaque customer id).

• Platform account identifier (shop domain).
• OAuth access tokens required to call the shopify API.
• Optional settings the merchant saves on the settings page.
• Billing tier (free or the single paid plan) and the provider's subscription id.
• For order ingestion: platform order id, source tag, currency, total, and an opaque platform customer id. We do not store names, emails, or addresses.
• Install, uninstall, billing, and compliance event log entries for support.

What we do not collect

• Product catalog copies (exported on demand, not persisted).
• Payment card data. Shopify Billing collects that.
• Customer personal information beyond an opaque platform customer id on orders.

Uninstall and deletion

On uninstall we drop API tokens immediately and schedule deletion of remaining merchant data within 48 hours. The Shopify shop/redact webhook triggers this path. A scheduled purge job is the backstop.

GDPR topics (Shopify)

customers/data_request records the request and returns any stored order ids for that customer. customers/redact deletes those order rows. shop/redact deletes all data for the shop.

Related Policies

• Marlo Merchant Terms of Service
• Data Processing Addendum

Contact

Support: talbuilds0@gmail.com