Privacy Policy
Last updated: January 4, 2026
1. Introduction
FieldRelay ("we," "us") respects your privacy and the privacy of your customers. This Privacy Policy explains how we collect, use, and process data when you install our App on your Shopify store.
2. Data Controller vs. Data Processor
FieldRelay acts as a data bridge. We do not own the Customer Data. We process it solely to fulfill the Merchant's request to sync records between Shopify and the FSM (Jobber).
- The Merchant (You): You are the Data Controller. You control the customer data and decide to send it to us by installing our App.
- The App (Us): We are the Data Processor. We process data on your behalf solely to perform the function of syncing orders to your FSM.
3. Information We Collect
We collect the following information from your Shopify Store via API webhooks:
- Merchant Info: Store name, email, and Shopify domain.
- Customer PII (Personally Identifiable Information): Full Name, Email Address, Phone Number, Billing and Shipping Addresses.
- Order Data: SKUs, product titles, and subscription details.
4. How We Use Your Information
We use this information strictly for the following purposes:
- Automation: To create or update Client and Job records in your connected Jobber account.
- Identity Resolution: To prevent duplicate records, we compare incoming Shopify data against your existing FSM database.
- Support: To troubleshoot failed syncs or API errors.
We do NOT sell, rent, or trade your data or your customers' data to any third parties.
5. Sub-processors & Third Parties
To provide our Service, we utilize the following third-party infrastructure providers. By using our Service, you authorize us to transfer data to these partners:
| Entity | Role | Location |
|---|---|---|
| Supabase | Database & Auth Storage | USA (AWS East) |
| Google Cloud Platform | Cloud Hosting & Infrastructure | USA |
| Cloudflare | Hosting, CDN & Security | Global |
| Shopify | E-commerce Platform | Global |
| Jobber | Destination FSM | Canada |
| OpenAI | Identity Deduplication AI | USA |
*Note: Data sent to AI providers (OpenAI) is used strictly for processing the specific request and is not used to train their public models.
6. Data Retention
- Operational Retention: We retain sync logs and mapping data for as long as you have the App installed to ensure the Service functions.
- Shopify Redaction: We strictly adhere to Shopify’s mandatory GDPR webhooks. If we receive a redaction request, we delete or anonymize the relevant data within 48 hours.
7. GDPR & CCPA Rights
You and your customers have the right to access, correct, or delete personal data. To exercise these rights, please contact us or initiate a request through the Shopify Admin privacy portal.
8. Contact Us
For privacy-related inquiries, please contact us at support@fieldrelay.app.