Effective date: June 18, 2026 Last updated: June 18, 2026
This Privacy Policy explains how Merqio (“we,” “us,” or “our”) collects, uses, and protects information when you use the BulkOrdr Shopify app (“the App”). By installing or using the App, you agree to the practices described in this policy.
- Who We Are
BulkOrdr is a Shopify app developed and operated by Merqio. For questions about this policy, contact us at support@merqio.app.
- Information We Collect
Merchant Information When you install the App, we collect and store:
- Your Shopify store domain and shop ID
- Your current billing plan and subscription status
- Monthly draft order usage counts
Customer Information (via CSV import) When you upload a CSV file to create draft orders, you provide us with your customers’ information, including:
- First and last name
- Email address
- Line item details (product titles, SKUs, quantities, and prices)
This customer data is processed on your behalf as a merchant. You, the merchant, are the data controller for your customers’ information. We act as a data processor.
Automatically Collected Information We may collect standard server logs including IP addresses and request timestamps for security and operational purposes. This data is not linked to individual end customers.
- How We Use Information
We use the information we collect to:
- Create Shopify draft orders on your behalf for each CSV row
- Generate and store unique invoice links for each customer
- Track invoice payment status (outstanding and collected)
- Enforce plan limits and calculate usage-based billing fees
- Respond to support requests
We do not use customer data for advertising, profiling, or any purpose beyond providing the App’s core functionality.
- How We Share Information
We do not sell your information or your customers’ information to third parties.
We share data only as necessary to operate the App:
Shopify: Draft orders, customer names, and email addresses are submitted to Shopify’s API to create draft orders and invoice links. Shopify’s own privacy policy governs how Shopify handles that data.
Gadget: The App is hosted on Gadget’s infrastructure. Data is stored and processed on Gadget’s platform in accordance with their data processing terms.
We may disclose information if required to do so by law or in response to a valid legal request.
- Data Retention
Invoice records, campaign data, and customer information imported through the App are retained for as long as the App is installed on your store.
When you uninstall the App, we process Shopify’s mandatory GDPR compliance webhooks (customers/data_request, customers/redact, shop/redact) to handle data deletion and access requests in accordance with Shopify’s requirements.
You may contact us at support@merqio.app to request deletion of your store’s data at any time.
- Your Rights
Depending on your location, you or your customers may have rights under applicable privacy laws (including GDPR and CCPA) such as the right to access, correct, or delete personal data. As the merchant, you are responsible for honoring your customers’ data rights with respect to data you have collected and imported into the App.
If you have questions about how we handle data on your behalf, contact us at support@merqio.app.
- Data Security
We implement reasonable technical and organizational measures to protect the information we process. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
- Children’s Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children.
- Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the App after any changes constitutes your acceptance of the updated policy.
- Contact
For privacy-related questions or requests, contact us at:
Email: support@merqio.app Website: merqio.com/bulkordr/privacy-policy
Merqio App 