Privacy Policy

Last updated: September 14, 2026 · Applies to the Shopify app “Order Alerts for Telegram” by njX

Who we are

Order Alerts for Telegram is operated by njX, an independent developer. Contact: [email protected].

What the app does

It sends notifications about events in your Shopify store — paid orders, refunds, cancellations, abandoned checkouts and a daily summary — to the Telegram chats you connect.

Data we process

To send a notification we receive order data from Shopify through webhooks and the Admin API: order number, amounts, currency, line items, payment method, customer name, email, city and country, and the order note. This customer data is processed in transit only: it is queued for a few seconds, formatted into a message and delivered to Telegram. We do not store customer names, emails, addresses or notes in our database.

We store: your store domain, an API access token, your settings, the Telegram chat ids you connected, delivery logs (order number, status, timestamp — no customer fields), the ids of abandoned checkouts we have already alerted about, and messages you send us through the support form.

Permissions

The app asks Shopify for five read permissions, once. Nothing is ever written to your store.

• read_orders — the order an alert is about: number, total, items, customer, shipment and tracking.
• read_products — the stock left after an order (Pro, switched on in Alerts); products are never changed.
• read_fulfillments — delivery statuses from the carrier: in transit, delivered, failed (Pro).
• read_returns — return requests, approvals and declines (Pro).
• read_shopify_payments_disputes — a chargeback and its evidence deadline (Pro, stores on Shopify Payments).

Features marked Pro arrive in the next updates; the permissions are asked once so that you are not asked again for each of them.

Where data is processed

• Cloudflare (Workers, D1, Queues) runs the app; data stays on Cloudflare’s network in transit.
• Telegram (Telegram Messenger Inc.) delivers the messages. Delivered messages live in the chats you chose, under Telegram’s own privacy policy.
• Shopify handles billing; we never see payment details.

Retention

• Delivery logs: deleted after 90 days.
• Processed-webhook ids: deleted after 7 days. Invite codes: after 1 hour.
• When you uninstall the app, or when Shopify sends a shop/redact request, all data for your store is deleted within 48 hours.
• Customer data requests and customer redaction requests from Shopify are acknowledged automatically; since we hold no customer data, there is nothing to return or erase.

Security

All traffic is encrypted in transit (TLS). Stored data and its backups are encrypted at rest by Cloudflare (D1). Test and production data are separated: development runs against a development store and a local database; production runs on its own worker and database. Only the operator has access to production; the Cloudflare, GitHub and Shopify Partner accounts require strong passwords and two-factor authentication, and every access is recorded in Cloudflare’s audit log.

Incident response

• Detection. Errors, failed deliveries and health checks are monitored around the clock by an internal alerting bot; the operator is paged within minutes.
• Containment. On a suspected breach we revoke the affected access tokens, rotate secrets and, if needed, pause deliveries until the cause is fixed.
• Notification. Affected merchants are notified by email within 72 hours of confirming an incident, with what happened, which data was involved and what we did; Shopify is informed through the Partner channels.
• Review. Every incident ends with a written post-mortem and a change that prevents the same failure.

Data loss prevention: customer data is never stored, so there is nothing of your customers’ to lose; store settings and delivery logs are covered by Cloudflare’s point-in-time backups.

Your responsibilities

You decide which Telegram chats receive alerts. Anyone in a connected group sees the messages. Use the per-recipient masks (“hide customer details”, “hide prices”) for people who should not see who bought or for how much.

Contact

Questions or GDPR requests: [email protected], or the support form.