ShipNoDrama privacy policy
ShipNoDrama for Shopify, by 7Labs · Effective October 28, 2026
7Labs (“we”), based in the Republic of Moldova, runs the ShipNoDrama app (“the app”) and shipnodrama.com. This policy explains what the app receives from your Shopify store, why, how long it’s kept and who it’s shared with, and what the website collects from visitors (section 8). It is also the agreement between you, the merchant, and us about how we process your customers’ personal data (section 6), and part of the app’s terms of service.
1. What the app does
ShipNoDrama works out the day each order can ship from the ship days, lead times, release dates and daily limits you set. It holds the order in Shopify until that day and then releases it. It shows the same day to your customers on your product pages, thank-you page and order status page. It can start your Shopify Flow workflows when an order is held, released, held for review, moved to another day or misses its day, or when a day is fully booked, and your workflows can ask it to release an order, hold it for review, or put it back on its ship day. If you turn checkout rates on, it also prices shipping at checkout.
2. What the app receives and keeps
| Data | Why | Kept |
|---|---|---|
| Your settings and every earlier version of them | To work out ship days, and to let you undo or go back | Until 48 hours after you uninstall |
| Product and variant IDs, SKUs, product types, vendors, tags, and a release date you may set on a product | To know which of your groups a product is in | Updated when a product changes; until 48 hours after you uninstall |
| For each order shipped from your own locations: the order and fulfillment order IDs, the order number, when it was placed, the products and quantities in it, and the ship days the app works out (first promised, current, last told to the customer, actually shipped) | To hold and release the order, show its ship day, count your daily limits and work out your on-time rate | 13 months after the order last changed (orders still on hold are kept until released), and until 48 hours after you uninstall |
| Ship-date updates: the order number, the old and new day and the reason | To tell your Shopify Flow workflow that a day moved, and to show you what was sent | 13 months |
| Other Shopify Flow events: the order ID, its ship day, why it waits, who released it (schedule, staff, Shopify Flow or the app, never a name), how many days late it is; or a product group’s name, a day and its daily limit | To start your Shopify Flow workflows once each, and to try again if Shopify doesn’t answer | 13 months |
| Activity log: what was changed, when, and by which staff member (their Shopify user ID or email) | So you can see who changed what | 13 months |
| Checkout counts, if checkout rates are on: how many rate requests a day, how many got no rate, and response times | To show you checkout is working | 13 months |
| Your ShipNoDrama plan as Shopify reports it (plan, trial and billing-cycle dates), and the name of your Shopify plan | To switch on what your plan includes, and to say whether Shopify lets your store use checkout rates | Until 48 hours after you uninstall |
| Which orders ShipNoDrama managed in each billing period (order IDs only) | To show your usage against your plan, counting each order once | 13 months |
| Your agreement to the terms of service: your store’s address, which version, when, and which staff member agreed (their Shopify user ID or email) | To show that your store agreed to the terms, if there’s ever a dispute | While the app is installed, and after you uninstall until 3 years from the day you agreed |
| Your store’s Shopify access token | To act on your store | Deleted when you uninstall |
Backups: the app’s database is copied once a day and each copy is kept for 5 days, so anything deleted is gone from the copies within 5 days.
Not collected: the app doesn’t ask Shopify for your customers’ names, email addresses, phone numbers or addresses, and doesn’t store them. At checkout, when checkout rates are on, Shopify sends the shipping address and the cart to the app. The app uses only the country, state or province and postal code to pick a price, in memory, and stores nothing from the request but the counts above.
3. In your customers’ browsers
The ship date block on your product pages and the blocks on your thank-you and order status pages run in the customer’s browser. They use data already on your store (the ship-day calendar the app publishes to your store, and the order’s own ship day). They don’t set cookies, track anyone, or send anything to the app.
4. Who we share data with
- Shopify, which runs your store: the app places and releases holds, reads products and orders, splits shipments when you ask it to, writes each order’s ship day to the order, and sends the Shopify Flow events in section 2 (order IDs, ship days, reasons, product group names and daily limits) to Shopify Flow on your store. When one of your workflows runs a ShipNoDrama action, Shopify sends the app that order’s ID.
- Fly.io, our hosting provider, which runs the app’s servers and database in the United States and processes data only to do that.
- Shopify billing: Shopify bills your plan. The app asks Shopify’s Partner API which plan your store is on, sending only your store’s Shopify ID.
The app’s data is stored in the United States. Fly.io is certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions, which the EU, the UK and Switzerland recognise as adequate protection for data sent to it. The people who run ShipNoDrama work from the Republic of Moldova and reach the app’s servers from there.
We don’t sell data, share it with advertisers, or use it for anything other than running the app for you.
5. Security
- Everything travels over HTTPS. Webhooks, checkout requests and Shopify Flow action requests from Shopify are checked against Shopify’s signature before they’re used.
- The app’s database is stored on an encrypted disk.
- Access tokens are never written to logs. Error logs can include your store’s myshopify.com address and Shopify order IDs, never customer names, emails or addresses.
- Only the people who run ShipNoDrama can reach its servers, and only to keep it working.
6. Data processing terms
For the personal data of your customers that the app processes (order IDs, order numbers and order times), you are the controller and 7Labs is your processor. We:
- process it only to provide the app, as set up by you;
- keep it confidential, and limit access to the people who run the app;
- use only the subprocessors listed in section 4, and update this policy before adding another;
- help you answer your customers’ requests: Shopify sends us your customers’ data and deletion requests, and the app answers them automatically (it holds no customer identity, and deletes the records of the orders named in a deletion request);
- tell you without undue delay if we learn of a breach affecting your data;
- delete it when our service to you ends: 48 hours after you uninstall, Shopify asks the app to delete your store’s data, and it does. Backups follow within 5 days.
7. Why we may use the data
For your store’s data and your staff’s (section 2), we are the controller. We use it to provide the app you installed (our contract with you), and to keep the app secure and working and to keep proof of your agreement to the terms (our legitimate interests). For your customers’ data we act only as your processor (section 6).
8. The shipnodrama.com website
On your first visit the website asks whether you accept analytics cookies. Only if you choose Accept does it load Google Analytics, which sets cookies and receives your IP address, browser details and the pages you view, so we can count visits and see which pages are read. If you choose Decline, or don’t choose, Google Analytics isn’t loaded and the site works the same. Your choice is saved in your browser, and you can change it any time with Cookie settings at the bottom of every page. Google is certified under the EU-U.S. Data Privacy Framework.
Pages are delivered through Cloudflare and our web host, which process your IP address to serve pages and block attacks. If you email us, we use what you send to reply, and keep it no longer than 24 months after we last hear from you.
Analytics run on your consent. Delivering the site, keeping it secure and replying to email rest on our legitimate interest in running the site and answering you.
9. Rights
Because the app holds no names, emails or addresses of your customers, there is usually nothing to give a customer who asks for their data. Deletion requests that Shopify sends us for a customer delete the app’s records of that customer’s orders.
You, your staff and website visitors can ask us for a copy of what we hold about you, ask us to correct or delete it, or object to how we use it, by emailing us. You can also complain to Moldova’s National Center for Personal Data Protection, or, if you are in the EU or the UK, to your own data protection authority.
10. Children
The app is a tool for merchants. It isn’t directed at children and doesn’t knowingly collect data about them.
11. Changes
If this policy changes, we’ll update the date at the top.
12. Contact
Questions about this policy or your data: 7Labs · 7labs@dmitru.com.