Privacy policy

Last updated: 18 October 2026

This policy explains what data Label Ledger (the "app") collects, why, and what happens to it. The app is provided by Elektraset, s.r.o. ("we", "us"). Contact: help@elektraset.com. Website: elektraset.com.

Label Ledger is a Shopify app that audits shipping-label adjustments (charges and credits that carriers add after a label is bought). It is installed by Shopify merchants ("you"). For the personal data of your customers that the app processes, you are the controller and we act as your processor.

Data we collect

Data	Source	Why
Store data: shop domain, store name, currency, Shopify plan type (development store or not), app plan, install and uninstall dates	Shopify Admin API	To run the app, apply plan limits and billing
Shopify access token (session)	Shopify OAuth	To read your orders on your behalf
Fulfilled orders: order ID and number, fulfillment ID, tracking numbers and carrier, ship date, order weight, line items (SKU, title, quantity, catalog weight), shipping method title	Shopify Admin API (`read_orders`, `read_products`) and the `orders/updated` webhook	To match carrier adjustments to orders and compare billed weights with catalog weights
From the shipping address: country, state or province, ZIP or postal code, and whether a company name is present (not the name itself)	Shopify Admin API	Destination patterns, residential-surcharge checks, matching by ZIP
Adjustment data you import: tracking or order number, dates, amounts, carrier reason, stated and billed weight, dimensions and package type, destination ZIP, adjustment or invoice reference	Files and text you upload or paste	The audit, dashboards and dispute packets
Settings: alert limits, alert email address, Slack incoming webhook URL (stored encrypted), box presets, dispute status notes	You	Alerts and the audit

We do not store customer names, email addresses, phone numbers or street addresses. Uploaded files are parsed in memory; only the adjustment rows are stored, not the file.

How we use data

To provide the app: matching, cause analysis, dashboards, dispute packets and alerts.
To bill through Shopify's Billing API and enforce plan limits.
To count anonymous, aggregated product metrics (for example how many stores imported adjustments in a month). These counts contain no store names, customer data or order data, and exclude development stores.
To answer your support requests.

We do not sell personal data, do not use it for advertising, and do not use your data to train AI models.

Sharing and subprocessors

Shopify: the platform the app runs on, and billing.
Our hosting provider: runs the app server and its database.
Slack: only if you add a Slack webhook; alert text (counts and amounts, no customer data) is sent to your channel.
Email provider: only if email alerts are on; alert text is sent to the address you enter.

We disclose data if the law requires it.

Retention and deletion

Data is kept while the app is installed.
When you uninstall, the app's access ends immediately and your sessions are deleted. 48 hours later Shopify sends a shop/redact request and we delete all data of your store (orders, parcels, adjustments, imports, settings). We keep only an anonymous record (install and uninstall dates, whether the store used the app and its plan history) for aggregated metrics.
On a customers/redact request we delete the parcel data of that customer's orders. On a customers/data_request we provide the data we hold about those orders (order number, tracking number, destination country, state and ZIP, ship date) to you.

Security

All traffic uses HTTPS. Secrets (such as the Slack webhook) are encrypted at rest with AES-256-GCM. Access to the servers is limited to our staff who run the app. Each request is checked against the store that sent it, so one store cannot see another store's data.

Your rights

You and your customers have rights under the GDPR, the CCPA and other laws (access, correction, deletion, objection, portability). Customers should contact the merchant; merchants can contact us at help@elektraset.com and we answer within 30 days. You can also complain to your data protection authority.

Changes

We will post changes on this page and update the date above. Material changes are announced in the app.