Privacy
Privacy policy
Effective 23 August 2026
Merge Me is operated by Marvello Pty Ltd (ABN 72 691 509 261), an Australian private company. This policy explains how we process information when a Shopify merchant installs or uses the app.
Information we process
We process the merchant's Shopify store identity, app settings, plan and usage information, and operational records needed to run and support Merge Me. For orders considered for merging, the app may process order and line-item details, customer identity, email, delivery address, discounts, delivery method, fulfilment status and tracking information. Merge Me does not store payment-card details.
Why we process it
- To identify compatible orders and create, revise or undo combined parcels at the merchant's direction.
- To apply the merchant's choices for shipping refunds, archiving, holds, fulfilment and notifications.
- To provide merge history, support, security, billing and service reliability.
- To meet legal, fraud-prevention and Shopify platform requirements.
Service providers
We use Shopify to provide the commerce platform, Google Cloud to host the app and encrypted database, Cloudflare to provide the public site and protected support-console access, and Resend to deliver support requests and email notifications. Shopify and any fulfilment provider that the merchant connects to Shopify may process combined orders according to the merchant's own Shopify and provider configuration. These providers process information under their own terms and applicable data-protection commitments.
Retention and deletion
Closed order-linked operational records are normally retained for 30 days after closure. Encrypted privacy-request responses are retained for no more than 30 days, short de-identified retry receipts for no more than 90 days, and de-identified daily aggregates for no more than 90 days. Open safety records remain only until they are resolved and then follow the relevant retention period. Valid Shopify privacy requests and uninstall events trigger tenant-bound deletion workflows.
Sharing and international processing
We do not sell personal information. Information is shared only with the merchant, Shopify, the service providers above, a merchant-authorised fulfilment provider, or authorities where legally required. Providers may process information in countries where they operate, subject to applicable contractual and legal safeguards.
Your choices and rights
Shopify customers should first contact the store where they placed the order. Merchants may use Shopify's privacy tools or contact us to request access, correction or deletion where applicable. We verify and deliver customer-data request results only through an authenticated merchant session.
Contact
Email privacy or data-protection questions to help@mergeme.app.