Privacy policy
Last updated: 28 October 2026
This policy covers the Shopify app “Paketora: Kuriri i pouzeće” (the app) and the website paketora.com. It says what personal data we handle, why, where it is kept and when it is deleted.
1. Who we are
Space Folding d.o.o., Novi Sad, Serbia, makes and runs the app. Contact for any privacy question: podrska@paketora.com.
2. Our role
- Data of your customers (shoppers). The merchant who installs the app is the controller. We are the merchant's processor: we use the data only on the merchant's instructions and only to provide the app.
- The courier. Each courier is an independent controller under its own contract with the merchant. The app sends the courier only what a shipment needs.
- Data about the merchant (for example the shop address and sender details). For this data we are the controller.
3. What data the app handles
| Data | Where it comes from | Why |
|---|---|---|
| Recipient name, shipping address, phone and e-mail | The Shopify order, when the merchant creates a shipment | The courier shipment, the label, the hand-over list and the courier's delivery notices |
| Order number, items, weight, amount to collect, payment and shipping method, parcel locker | The Shopify order | The shipment, cash on delivery (COD) and the COD ledger |
| Tracking numbers and delivery status | The courier | Tracking on the Shopify order |
| Sender details: company name, phone, e-mail, address, bank account for COD | The merchant | Printed on every label; the courier pays COD to this account |
| Courier login (username, password or API key) | The merchant | To send shipments to the courier in the merchant's name |
| Shop domain, country, language and plan | Shopify | To run and bill the app |
| Shop owner e-mail | Shopify, read when a notice is sent and not stored | Notices about the pilot period and about customer data requests |
| Waitlist e-mail | A merchant outside Serbia who asks to be told when the app starts in their country | That one message |
The app does not read billing addresses. It does not contact shoppers. It does not sell data, show advertising or build profiles.
No AI. Merchant and shopper data is never used to create, train or improve any machine learning or AI system, and it is never sent to an AI service.
4. Where the data is kept
The app runs on our own server in a data centre in the European Union. Data from Shopify orders is stored and processed there. We use these service providers (sub-processors):
| Provider | What it does | Where |
|---|---|---|
| Hostinger International Ltd | The server that runs the app and its database | EU data centre |
| Scaleway SAS | Sends the app's notices to the shop owner's e-mail | France (region fr-par) |
| Google (Google Workspace) | Our support mailbox: only the e-mails you send us, and the website's pilot form | Google's data centres |
We tell merchants in the app 30 days before we add or change a sub-processor.
5. How long we keep it
| Data | Deleted |
|---|---|
| Recipient name, address, phone and e-mail on a shipment | 90 days after the shipment ends (delivered, returned or cancelled), or 120 days after it was created if it never ends |
| Label PDF files | After 30 days |
| COD ledger (order numbers and amounts, no shopper data) | After 24 months, or at uninstall |
| Courier login and sender details | When the app is uninstalled |
| Everything about a shop | Within 30 days after the app is uninstalled |
| Database backups (encrypted) | After 14 days |
| Application logs (no names, addresses, phones, e-mails or passwords) | After 30 days |
| Audit log (codes and hashes only, no personal data) | After 12 months |
| Waitlist e-mail | 12 months after sign-up, or at uninstall |
After a shop is deleted, we keep only counts without the shop's name or domain (for example how many shops installed the app in a week).
6. Security
- All traffic is encrypted (TLS).
- Courier logins are encrypted in the database (AES-256-GCM) and never written to logs.
- Logs never hold names, addresses, phones, e-mails or passwords.
- Only the founder can reach the server, with an SSH key and two-factor login.
- If there is a data breach, we tell the merchant and Shopify within 24 hours.
7. Your rights
Shoppers: please contact the store you bought from. The store is the controller. When it asks Shopify for your data or for deletion, Shopify tells the app, and the app gives the store an export or deletes your data on the store's orders.
Merchants: you can ask us to see, correct or delete your data at podrska@paketora.com. Uninstalling the app deletes all of your shop's data within 30 days.
You can complain to a data protection authority: in Serbia the Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti (poverenik.rs), in the EU the authority of your country.
8. This website
paketora.com sets no cookies, has no analytics or tracking and loads nothing from other companies; the fonts are on our own server. The server keeps no log of visits.
Pilot form. When you send the form on /en/pilot/, the store name, e-mail, phone, country and message go as one e-mail to our mailbox (Google Workspace), so that we can reply. The website does not store them. We delete the e-mail 12 months after our last message, unless your store joins the pilot.
9. Changes
When we change this policy, we change the date at the top of this page.