This policy describes how PackScan (“the app,” “we,” “us”) handles information when a merchant installs or uses PackScan on a Shopify store. PackScan is a warehouse tool for searching orders, scanning items, marking fulfillments, and optionally buying shipping labels.
This page is provided so merchants and Shopify App Store reviewers can see what the app collects. It is not legal advice.
1. Who this covers
PackScan is used by store staff. We do not market to consumers through the app. When staff fulfill an order, the app reads order and shipping details that the merchant already stored in Shopify so a package can be packed and shipped.
2. Information we access from Shopify
After the merchant installs PackScan and grants permissions, the app may read and update:
- Shop name and domain
- Orders, line items, SKUs, barcodes, quantities, notes, tags, and sales channel
- Customer name, email, and shipping address on those orders
- Fulfillment orders, locations, inventory on-hand where Shopify exposes it
- Fulfillment and tracking that staff create in PackScan
We request only the Admin scopes needed to list orders, fulfill them, and (if used) buy a Shopify Shipping label. We do not read payment card numbers. We do not change products, themes, or checkout.
3. Information staff enter in PackScan
- Scan and search input (order names, SKUs, barcodes)
- Pack size and box size defaults
- Ship-from name, phone, and address
- Optional carrier credentials (FedEx, UPS, Stamps.com username / password / Integration ID)
- Carton weight, dimensions, and tracking numbers
Carrier passwords and API secrets are stored in the staff browser (local storage) so labels can be requested from that workstation. They are sent to PackScan’s server only for the rate or label call, then discarded. Do not save those secrets on a shared or public computer.
4. How we use information
- Show the pick list and mark items fulfilled in Shopify
- Print packing slips and shipping labels the merchant requested
- Keep the shop connected after Shopify OAuth
- Diagnose install or fulfillment errors when a merchant emails support
We do not sell personal information. We do not use order or customer data for advertising. We do not train public AI models on merchant order data.
5. Where it is stored
- Shopify: orders and fulfillments stay in the merchant’s Shopify store.
- PackScan host: if the merchant uses the hosted app, we store the shop domain and the Shopify offline access token so the app can act on that shop. Tokens are not shown in the warehouse screen.
- Staff device: settings, pack defaults, and carrier keys stay in that browser unless the merchant clears site data.
- Carriers: if staff print a FedEx, UPS, Stamps.com, or Shopify Shipping label, name, address, weight, and package size are sent to that carrier so the label can be created. That carrier’s privacy policy then applies.
6. Cookies and session
The hosted app sets a session cookie so we know which shop is signed in. We do not use advertising cookies or third-party ad pixels in PackScan.
7. Sharing
We share data only:
- With Shopify, to fulfill the merchant’s request
- With a carrier the merchant chose, to rate or print a label
- With the hosting provider that runs the app (infrastructure only)
- If required by law
8. Retention
Shopify tokens are kept while the app stays installed. When the merchant uninstalls PackScan, we delete that shop’s stored token from our host as soon as the uninstall is processed. Browser settings remain until the staff member clears them. Carrier label records live with the carrier and with Shopify if tracking was written on the order.
9. Security
Access to Shopify uses OAuth. The host should be served over HTTPS. Staff are responsible for who can open PackScan on the warehouse computer and for protecting carrier passwords. No method of transmission is perfectly secure.
10. Children
PackScan is a business app. It is not directed at children under 13.
11. Merchant rights and your customers
Merchants can uninstall the app at any time from Shopify Admin → Apps. For access, correction, or deletion of customer personal information that lives in Shopify, use Shopify Admin or the merchant’s own privacy process. PackScan does not replace the merchant’s obligations to their customers.
California and similar laws: we do not sell or share personal information for cross-context advertising. To ask what we store for a shop, email the address below with the myshopify domain.
12. Changes
We may update this policy. The effective date at the top will change. Continued use of PackScan after an update means the new policy applies.
PackScan