EN
Start free

Store integration privacy notice

Last updated: 2026-10-23

This notice covers the Shopify and Amazon store integrations used with JetShipper. It explains the information involved in connecting a merchant’s store and preparing that merchant’s orders for production and fulfillment.

  • SERYA CORPORATION, 4111 Greenbriar Dr Ste B, Stafford, TX 77477, USA, is the contracting company for JetShipper services and the controller for seller-account, contract, billing and related website and support data used to administer those services.
  • JET TEKNOLOJİ ÜRETİM VE TEDARİK LTD. ŞTİ., Bağlar Mh. Osman Paşa Cd. No: 66/11, İstanbul, Türkiye, owns the JetShipper brand in Türkiye and operates the technology, production and support functions as Serya’s contractor. JET processes service data on Serya’s instructions and is the applicant and technology operator for the Shopify and Amazon integrations.
  • Buyer data: you are the controller of the buyer information you send us for your orders. We process that information on your instructions to produce, personalize and fulfill those orders.
  • These responsibilities depend on the processing purpose, not the language you select. This notice does not change the contracting company or the service Terms.
  • Questions and requests: privacy@jetshipper.com.

Merchants remain responsible for their relationship with their buyers and for having authority to provide buyer information and personalization files.

Support and company details: integration support.

  • Merchant and connection information: account contact details, store domain or seller identifier, marketplace or region, authorization permissions and connection credentials needed to maintain the authorized connection.
  • Shopify information: product and variant identifiers, SKUs, product options and images; order identifiers, dates, amounts, currency, status, items, notes and personalization; recipient name, delivery address and contact details where authorized and supplied; fulfillment, tracking and refund information.
  • Amazon API information currently supported: seller and marketplace identifiers, listings, SKUs, order and item details, quantities, amounts, status and the location fields supplied through non-restricted access. The current API integration does not retrieve buyer names, street addresses, phone numbers, buyer email or restricted personalization data.
  • Information supplied directly: order instructions, designs, personalization files, shipping-label files, support messages and attachments. These files may contain personal information even when it was not obtained through a marketplace API.
  • Operational records: connection and synchronization events, security logs, production and shipping references, and records needed to investigate errors or answer support requests.

Access depends on the merchant’s authorization, the platform’s permissions and the features in use. Restricted Amazon access must not be treated as available merely because a store is connected.

We use integration information to authenticate authorized stores, import and match listings and orders, prepare production and personalization, arrange fulfillment, communicate order or tracking updates where supported, provide support and maintain security. Processing also supports the accounting, tax, dispute and other legal records applicable to the service.

Where applicable, merchant-account processing relies on the service contract, legal obligations or legitimate interests such as security and support. Optional marketing relies on the relevant permission. For buyer information processed on a merchant’s instructions, the merchant is responsible for the applicable lawful basis and buyer notice.

Connected-store buyer information is not used to market unrelated products directly to buyers, sold to third parties or used to build unrelated advertising profiles. Merchant marketing preferences are separate from essential account and order communications.

Access is limited to the merchant’s authorized users and the staff or service providers who need it for their assigned work. Relevant recipients can include Serya and its contractor JET Teknoloji, production and fulfillment providers, hosting and file-storage providers, communication and support providers, label providers and the carrier delivering the parcel.

Information is sent back to the connected platform when needed for an authorized integration function. Support content may be processed by support tools, including AI assistance where enabled; avoid including passwords, access tokens or unnecessary buyer details in support messages. Authorities or advisers may receive information where the law requires or permits it.

The service involves a US company and a technology and production contractor in Türkiye. Hosting and service providers may process information in Germany and other countries. The applicable data protection requirements depend on the information, the recipient and the countries involved. Contact our privacy team for information about the recipients, processing locations and transfer arrangements relevant to your data.

The application is designed to restrict access by role and company, protect connection credentials and verify incoming platform notifications. These controls do not make any system risk-free. This notice does not represent a security certification or platform endorsement.

Our retention policy calls for buyer details, personalization files and uploaded shipping labels, to be deleted or anonymized on this schedule: for Amazon orders, 30 days after delivery; for orders from all other platforms, 90 days after delivery or when an open return or claim on that order is closed, whichever is later. What is erased: buyer and recipient name, email, phone, street address, city and ZIP code; buyer, gift and order messages; personalization answers and files; order files attached by the seller; shipping labels and printed copies; the name of the person who signed for delivery; return sender details, return labels and return photos; claim and ticket files linked to the order (the claim and ticket text itself is kept); and the same values in change history. What we keep: country and state, order numbers, items, prices, money and ledger records, and production and shipment facts. Backup copies keep this information until those backups expire; if a backup is ever restored, completed deletions are applied again before it is used. Deleting information from active records does not itself remove it from existing backup snapshots. You can request deletion through our data request process.

Any exception to deletion must have a specific basis in applicable law: a legal obligation to retain particular records or, where the law permits, the establishment, exercise or defence of a legal claim. Only the information necessary for that purpose may be retained, only for the period justified by that basis, and its use is restricted to that purpose. Stricter platform deletion requirements still apply. A dispute or an open production job does not by itself extend a deletion deadline.

Other information is retained for the purposes for which it is needed: maintaining an authorized connection, providing support, handling legal claims where applicable law permits and meeting legal requirements. A retained financial or production record does not by itself justify keeping every personal field or uploaded file.

Disconnecting a store stops the connection; it is not the same as deleting every historical order or closing the merchant’s account. Deletion requests are assessed separately. Information that must be retained for a legal obligation is restricted to that purpose. See data requests and disconnection.

For Shopify, data-access and deletion notifications follow the platform request process. Shopify requires the requested action to be completed within 30 days of receipt, subject to legally required retention. This deadline is separate from our delivery-based retention policy. An open production job does not by itself extend that deadline. Uninstalling the app is not a guarantee that every historical record is immediately erased.

The current Amazon API integration excludes restricted buyer information. Any future access to restricted information requires the appropriate approval and an implemented retention and deletion process before retrieval begins.

Depending on the applicable law, individuals may request access, correction, deletion, a copy of their information, restriction or objection to processing, or withdrawal of consent where processing relies on consent. We verify identity and authority before disclosing or changing information. Buyers should normally contact the merchant that accepted their order; we assist the merchant with information processed for that order.

Send requests to privacy@jetshipper.com. Our request instructions explain what to include. Applicable rights and complaint routes also depend on the individual’s location, including the relevant data protection authority. The Turkish regional notice is available at KVKK information.

For other JetShipper website or service processing, consult the applicable general privacy notice and cookie notice. Production and fulfillment remain subject to the service Terms. Changes to this integration notice will be posted here with an updated date.