Who this policy is for
Robotik Kargo is a Shopify app that lets merchants create shipments with their own carrier contracts in Turkey, print shipping labels and track shipments. The app is developed and operated by Robotik Web. This page explains how we process data of merchants who install the app and of the customers who buy from those stores.
For customer data, the merchant is the data controller; Robotik Kargo processes that data on the merchant's behalf and only on the merchant's instructions (data processor under GDPR and Turkish KVKK Law No. 6698).
Data we process
| Store data | Store domain, Shopify access token, app settings (volumetric weight, labels, cash on delivery, box types) and the selected plan. |
|---|---|
| Carrier account data | The username, password and customer number of the merchant's carrier contract. Passwords and keys are stored encrypted with AES-256-GCM; the panel only shows their last two characters. |
| Shipment records | Order number and Shopify order ID, shipment key, tracking number, status, volumetric weight, weight, parcel count, box name and cash-on-delivery amount. |
| Customer data | The recipient's name, address, phone and email are read from Shopify only when a shipment is created or a label is printed, and sent to the selected carrier. We do not store them in our database. |
| Usage data | Daily shipment count per store, used for billing. |
How we use data
- To create, cancel and track shipments with the carrier for the orders the merchant selects.
- To generate shipping labels and add the tracking number to the Shopify order, and, if the merchant enables it, to send Shopify's shipping notification to the customer.
- To calculate app charges through Shopify Billing.
- To answer the merchant's support requests.
We do not use data for advertising or profiling, and we do not sell data.
Who we share data with
- The carrier selected by the merchant: recipient name, address, phone, email, weight and, where applicable, the cash-on-delivery amount needed for the shipment.
- Shopify: tracking numbers, fulfillment records and billing records.
- Infrastructure providers: our server hosting provider and Cloudflare, which relays Shopify webhooks. They process data only to provide their service.
We do not share data with anyone else unless required by law.
Retention and deletion
- When the app is uninstalled, the Shopify access token is deleted immediately.
- When Shopify sends the shop data erasure request (about 48 hours after uninstall), the store's carrier accounts, shipment records, usage records and settings are permanently deleted.
- When a customer's data erasure is requested, shipment records for that customer's orders are deleted.
- When a merchant deletes a carrier account in the panel, its encrypted credentials are deleted immediately.
Security
All traffic between the panel and our server uses HTTPS, and every request is verified with a Shopify session token. Carrier passwords are stored encrypted, label links are short-lived signed links, and Shopify webhooks are accepted only after their signature is verified.
Your rights and contact
Customers can exercise their rights (access, correction, deletion, objection) by contacting the store they bought from; the store forwards these requests to us through Shopify. Merchants and anyone else can contact us at:
Robotik Web
Email: info@robotikweb.com.tr
Phone: +90 850 307 34 36
If we change this policy we will update the date on this page and announce significant changes in the app panel.