Paczkot Privacy Policy

1. Who we are

Paczkot is provided by PROPORTO Mikołaj Madejczyk, ul. Korczaka 49C, 39-300 Mielec, Poland, e-mail: kontakt@paczkot.pl. For merchant account data we are the controller. For the personal data of the merchant's customers we act as a processor on behalf of the merchant (Data Processing Agreement: paczkot.pl/umowa-powierzenia).

2. Data we process

• Merchant data: shop domain, shop name and contact e-mail, sender details, encrypted Apaczka API keys and Furgonetka access tokens, app settings.
• Order data needed to ship: recipient name, shipping address, phone, e-mail, order number, line items, selected pickup point.
• Shipment data: tracking number, carrier, date, price, an encrypted copy of the PDF label.
• Manually added parcels (outside Shopify): recipient details entered by the merchant, stored encrypted.
• Pickup point search: the city, address or postal code typed into the map, or approximate location only if the customer taps “Use my location”.

3. Why

To create shipments and labels through the merchant's own Apaczka or Furgonetka account, send tracking numbers back to Shopify, let customers choose a parcel locker, bill the Pro plan through Shopify, answer support requests and keep the service secure.

4. Who receives data

Apaczka.pl / Alsendo or Furgonetka.pl (shipments, on the merchant's instruction), Shopify, Hostinger (hosting in Germany and e-mail, EU), InPost public points API and OpenStreetMap Nominatim (search text or coordinates only), Alsendo points map. We never sell data or use it for advertising.

5. Retention

Until the app is uninstalled; all shop data (settings, shipments, label copies) is deleted after Shopify's shop/redact request (48 hours after uninstall). Customer data is also deleted on customers/redact requests. In-app error log: last 300 entries per shop, no secrets or e-mail addresses. Server logs: up to 30 days. Label copies and manual parcel data are encrypted at rest (AES-256-GCM).

6. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing, and lodge a complaint with the Polish supervisory authority (UODO). Contact: kontakt@paczkot.pl.

7. Changes

Effective 13 listopada 2026.