Privacy & data

Protected customer data

PickForge processes orders to run your warehouse, but it is built zero-PII: it never stores customer names, addresses, emails or phone numbers.

ZERO-PII STORAGE

What PickForge accesses

read_orders

Order number, line items (SKU, quantity, title, image, barcode), fulfillment status and tracking numbers — the data a picker needs. Customer fields in the API response are discarded, never persisted.

read_products

Product titles, SKUs, barcodes and images — so a scanned barcode resolves to the right item.

write_merchant_managed_fulfillment_orders

Creating the fulfillment (with tracking) on your merchant-managed location when a packed order is verified complete.

read_locations

Your store's fulfillment locations, so fulfillments land on the right one.

What PickForge never stores

Customer names, shipping or billing addresses, emails, phone numbers, payment details, or any other personally identifiable customer data. Locally cached orders hold only: order id/number, line items (SKU/qty/title/image/barcode), tracking numbers and statuses. Because no customer personal data is retained, GDPR customer data-request and redact webhooks are answered truthfully with "nothing stored".

Retention & deletion

  • Cached order data exists only to run the warehouse workflow and is purged when your shop is redacted (48h after uninstall, per Shopify's GDPR flow).
  • Warehouse staff accounts are PIN-only — we store a hash of the PIN, never the PIN itself, and no staff personal contact data is required.
  • Access tokens are encrypted at rest (AES-256-GCM) and deleted immediately on uninstall.