Boxio 3PL App Privacy Policy
Effective October 12, 2026.
This policy explains what information the Boxio 3PL app (the "App") collects when a merchant installs it on a Shopify store, how Boxio LLC ("Boxio", "we") uses it, and how merchants and their customers can ask us to access or delete it. Boxio is a third-party logistics (3PL) company: we store merchants' products and pick, pack and ship their orders from our warehouses in Springville, Utah and Jacksonville, Florida. The App connects a merchant's store to the fulfillment services the merchant has contracted Boxio to provide. Our separate website privacy policy covers boxioship.com.
Information the App accesses
The App has read-only access to the merchant's store. It cannot create, edit or delete anything in the store. With the merchant's approval at install, it reads:
- Store details: the store's name and myshopify.com address.
- Orders and fulfillment: order numbers, dates, line items (product names, SKUs, quantities, prices), shipping method, fulfillment status and fulfillment locations.
- Customer details needed to ship an order: the recipient's name, shipping address, email address and phone number, as included on the order.
- Products, inventory and locations: product and variant details, SKUs, inventory levels and the store's locations.
When someone opens the App inside the Shopify admin, Shopify confirms which store and staff account is using it. We use that only to show the right merchant's information; we don't store the staff member's personal details.
How we use it
- To fulfill the merchant's orders: receive, pick, pack, label and ship them, and handle returns.
- To check that the orders we receive match the orders in the store, so nothing is missed or shipped wrong.
- To show the merchant their own information inside the App: shipments, carriers, invoices and the status of the connection.
- To bill the merchant for our fulfillment services and to answer their questions.
We don't sell personal information, use it for advertising, or use merchants' customers' information for any purpose other than providing fulfillment services to that merchant.
Who we share it with
Only with service providers we need to deliver the merchant's orders and run our service, and only the information each one needs:
- Shipping carriers and label services (for example USPS, UPS, FedEx and our label provider), which need the recipient's name, address and phone number to deliver a package.
- Warehouse management software we use to run our warehouses, which holds order and inventory details.
- Hosting and storage providers that run the App and its database in the United States (Vercel and Supabase).
- Accounting software we use to invoice the merchant, which holds billing totals, not merchants' customers' contact details.
We may also disclose information if the law requires it, or to a successor if Boxio's business is sold or merged, under the same protections as this policy.
How we protect it
Information is sent over encrypted connections. The access key Shopify gives the App is stored encrypted and expires and renews automatically. Access to merchant and customer information is limited to Boxio staff and systems that need it to provide our services.
How long we keep it
We keep order and shipping information while we provide fulfillment services to the merchant, and afterwards only as long as we need it for billing, accounting, tax, carrier claims or other legal obligations. When a merchant uninstalls the App, we immediately stop accessing their store and delete the App's access key.
Deletion and access requests
- Merchants' customers: if you bought from a store that uses Boxio, contact that store; they can ask us, directly or through Shopify, to provide or delete your information. We respond to customer data requests and deletion requests sent through Shopify within 30 days, except for records we must keep by law.
- Merchants: 48 hours after you uninstall the App, Shopify asks us to delete your store's data. We delete the store data we're not legally required to keep within 30 days of that request. You can also email us at any time to ask for a copy of your data or its deletion.
Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to correct it, and to ask us to delete it. Send requests to the email below, or through the store you bought from. We won't treat you differently for making a request.
Children
The App is for businesses and isn't directed at children. We don't knowingly collect information about children except as part of a shipping address on an order placed by an adult.
Changes to this policy
If we change this policy, we'll update the effective date above and, for significant changes, let merchants who use the App know.
Contact us
Boxio LLC
2111 W Center Street, Unit 4
Springville, UT 84663
hello@boxioship.com