Privacy policy
Address Relay · Verlo Digital · Updated October 4, 2026
Scope
Verlo Digital operates Address Relay, a Shopify app for shipping-address transliteration. This policy describes how the app processes merchant and order data. Merchants determine how their customers’ data is used, and the app processes order information to provide the functions merchants enable.
Information processed
The app accesses store identifiers, authorization sessions, order identifiers, order dates, order notes, and shipping-address information needed for its features. Shipping information can include recipient names, company, address lines, city, region, postal code, country, and phone number. The app also keeps settings, processing outcomes, usage records, subscription information, and technical information needed to operate and secure the service. Support conversations may contain information voluntarily supplied through the chat service.
How information is used
Information is used to detect selected writing systems, generate Latin transliterations, update order shipping addresses or add translation notes, preserve and restore original addresses, display order history, retry failed processing, measure usage, manage subscriptions, provide support, and prevent abuse. The app does not sell customer information or use shipping addresses for targeted advertising.
AI processing
When AI transliteration is required, selected editable address text and the destination country code are sent to the OpenAI API. Recipient names are included when name transliteration is enabled. Postal codes, phone numbers, and country or region codes are not sent as editable address fields. API requests disable response storage using store: false; this does not guarantee zero provider retention. OpenAI may retain data under its applicable API data-control and security policies. AI output is validated before it is applied.
Storage and service providers
Structured original and transliterated address history is stored in an app-owned metafield on the Shopify order. Human-readable translation notes are also stored on Shopify orders. Railway hosts the application, background processing, and PostgreSQL database. The database stores authorization sessions, settings, processing metadata, billing and usage records, and privacy-request records. Legacy encrypted address backups may remain until their migration to Shopify has been verified. OpenAI provides AI processing, and Crisp provides support chat. These providers process information needed to supply their services. Shopify handles subscription selection and merchant billing; the app does not collect payment-card details.
Retention and deletion
Information is retained as needed to provide the service, recover interrupted processing, handle billing, meet legal obligations, and maintain security. Processing records are periodically removed according to the configured retention policy. Shopify order notes and metafields remain subject to Shopify and merchant retention and deletion controls. The app handles Shopify customer-data requests and customer or shop redaction webhooks. Uninstalling stops access and processing; uninstalling alone does not necessarily remove notes already written to orders. Provider logs and infrastructure backups can follow separate retention schedules.
Security
The app uses authenticated Shopify access, encrypted connections, restricted administrative access, and safeguards intended to minimize address data in application logs. Legacy address snapshots stored in the database are encrypted. No online service can guarantee absolute security.
International processing
Service providers may process information in countries other than the merchant’s or customer’s country. Applicable contractual and legal protections govern these processing arrangements.
Choices and rights
Merchants can turn processing off, select supported scripts, disable recipient-name transliteration, review or restore addresses, and uninstall the app. Customers may exercise applicable access, correction, or deletion rights through the merchant that collected their information. Requests transmitted through Shopify are handled through Shopify’s privacy workflows. Rights and retention exceptions depend on applicable law.
Updates
This policy may change when the app’s data practices or requirements change. The updated policy and its revision date will be published on this page.