Privacy policy
Last updated September 11, 2026
Tithe Logistics (“we”, “us”) is a Shopify app that quotes, books and tracks less-than-truckload (LTL) freight for Shopify merchants through the merchant’s own freight carrier account. This policy explains what personal data the app handles, why, who receives it, and how long we keep it.
Our role
For the personal data of a merchant’s customers, the merchant is the controller and we act on the merchant’s instructions as a processor (a “service provider” under California law). We use that data only to provide the app’s features to that merchant. For the business details a merchant gives us to run their account, we are responsible for it directly.
What we collect
From merchants who install the app:
- Your store’s Shopify domain and the access token Shopify issues to the app.
- Your shipping origin: pickup address and contact phone number.
- Freight details for the products you set up: SKU, carton dimensions and weight, and freight class.
- Your freight carrier account credentials, if you connect an account.
- Your plan, bookings and usage, for billing.
- Which staff member viewed customer shipment details, and when, as a security log.
About your customers, when you use the app to ship to them:
- When you create a shipment, either typed in or pulled from a Shopify order you pick: the recipient’s name, street address, city, state, ZIP code and phone number, and the Shopify order number.
- At checkout, Shopify sends the app the cart and shipping destination so it can return a freight rate. The app uses only the origin and destination ZIP codes and the items in the cart, and keeps a log of the destination ZIP code and the items.
We do not collect payment card details (Shopify handles billing), and the app does not use advertising, analytics or tracking tools.
How we use it
- To calculate freight rates for your checkout and your admin.
- To book, track and cancel shipments with your carrier, and produce shipping documents.
- To show you your shipments, quotes and freight dashboard.
- To bill for your plan through Shopify.
- To keep the app secure and to respond to privacy requests.
We do not sell personal data or use it for advertising.
Who we share it with
- Your freight carrier (XPO is the carrier integrated today). To price a shipment, the carrier receives the origin and destination ZIP codes and the freight’s weight, size and class. To book one, it receives the recipient’s name, address and phone number, because it cannot deliver without them.
- Shopify, which the app runs on.
- Amazon Web Services, which hosts the app and its database.
We share data with no one else, except where the law requires it.
How long we keep it
Freight claims can be filed and litigated long after delivery (US federal law allows at least 9 months to file a claim and 2 years after a denial to sue), so records of booked shipments are kept longer than anything else. A merchant can instruct us to keep them for a different period.
| Data | Kept for |
|---|---|
| Customer name, address, phone and order reference on a shipment that was booked with a carrier | 48 months after booking, then erased from the record |
| The same details on a shipment that was never booked | 90 days, then erased |
| Checkout rate requests (destination ZIP code and the items requested) | 180 days |
| Log of who viewed customer shipment details | 1 year |
| Records of privacy requests received from Shopify (identifiers pseudonymised) | 6 years |
| Billing and usage records (no customer personal data) | 7 years |
| Your carrier account credentials | Until you remove them or uninstall |
| Everything else tied to your store | Deleted when Shopify notifies us of your uninstall (48 hours after it) |
Two records are not yet covered by those timers: the raw responses the carrier returns when a shipment is booked or cancelled, and the carrier’s tracking updates. Either may repeat the recipient’s details. They stay with the shipment until your store’s data is deleted on uninstall; neither the timers nor a customer erasure request clears them today.
Your customers’ rights
If you are a customer of a store that uses this app, contact that store first: it decides how your data is used. When a store receives a request to access or delete your data, Shopify forwards it to us and we help the store fulfil it. A deletion request erases your name, address, phone and order reference from shipments linked to your Shopify order straight away (the carrier records described above excepted). A shipment the store typed in by hand has no link to your customer record, so it is erased on the schedule above.
Merchants’ rights
You can remove your carrier credentials at any time in the app’s settings. Uninstalling the app deletes your store’s data once Shopify notifies us, 48 hours later. To ask for a copy of your data or for it to be deleted sooner, email us.
Security
- All traffic to and from the app is encrypted in transit (TLS).
- Carrier account credentials are encrypted in the database (AES-256-GCM).
- Database backups are encrypted and kept for 30 days.
- Customer shipment details are visible only to staff signed in to the merchant’s own store, and each view is logged.
If we become aware of a breach affecting personal data, we will notify affected merchants and Shopify promptly, and the authorities where the law requires it.
Cookies
The app runs inside the Shopify admin and signs you in with Shopify’s session tokens. It sets no advertising or analytics cookies.
Children
The app is a business tool for merchants and is not directed at children.
Changes to this policy
When this policy changes, we update the date at the top of this page.
Contact
Questions or requests about privacy: customerservice@prefloortools.com.