Privacy Policy

Effective 18 August 2026

SmashOrder processes information solely to provide authorised order, cost, profit-readiness and fulfilment functions to participating sellers and their staff.

Information we process

We may process account identity, staff roles, shop identifiers, OAuth credentials, order and transaction details, product and customisation information, shipping addresses, shipment tracking, cost records, audit events and technical service logs.

Purpose and legal basis

Information is used to provide the requested service, secure accounts, synchronise authorised shop data, support fulfilment, calculate operational figures, investigate failures and meet legal obligations. Shop and buyer data is not sold or used for advertising.

Sharing and storage

Data is shared only with service providers required to operate the application and with marketplace APIs when an authorised user requests synchronisation or fulfilment. Production services are configured in an Australian cloud region where available. Cross-border processing may occur when communicating with marketplace and infrastructure providers.

Security and retention

Access is role-restricted; credentials are encrypted; sensitive actions are audited. Data is retained only while required for the service, legitimate operational records and applicable law, then deleted or de-identified.

Your choices

Authorised sellers may disconnect a shop and request access, correction or deletion of their organisation's data. Buyer requests received by a seller should be handled through that seller, who is responsible for the customer relationship.

Contact

Privacy and deletion requests may be sent to support@smashorder.com.