1. Introduction

This Privacy Policy explains how Sortiq, an ORA Tech Company ("we", "us", "our"), processes information when merchants install and use our application on the Shopify platform. Our app provides AI-powered operational automation to assist merchants with customer service and order management tasks such as refunds, returns, shipping updates, and order modifications.

2. Our Role

The Merchant is the Data Controller. Sortiq acts solely as a Data Processor and processes personal data only under the merchant’s documented instructions.

3. Information We Process

Merchant Information

• Store name and URL



• Contact and billing information



• App settings

Customer & Order Information

• Customer name



• Email address



• Phone number



• Shipping and billing addresses



• Order details and history



• Shipping/operational notes



• Customer and order identifiers

4. How We Use Information

Data is used strictly to provide operational features such as retrieving orders, processing refunds and returns, updating addresses, adding shipping notes, executing merchant-authorized actions, providing support, and maintaining security. We do not use personal data for advertising, profiling, resale, or marketing.

5. Legal Basis (GDPR)

Processing is based on contractual necessity, legitimate interests in operating the service securely, and the merchant’s instructions as Data Controller.

6. Data Minimization

We request only the minimum permissions necessary, process only relevant records, and avoid persistent storage of personal data whenever possible.

7. Security Measures

We use encryption in transit and at rest, secure hosting, access controls, and monitoring to protect personal data.

8. Retention and Deletion

Customer data is processed primarily in real time and retained only as long as necessary. Upon app uninstall, all associated data is permanently deleted without undue delay.

9. Data Sharing

We do not sell or rent personal data. Data is only processed by trusted subprocessors under strict confidentiality agreements.

10. Data Subject Rights

Individuals may have rights of access, correction, deletion, restriction, objection, and portability. Requests should be directed to the merchant. We assist merchants in fulfilling these requests.

11. Contact

Sortiq an ORA Technology Company



Keizersgracht 520H



1017EK Amsterdam



The Netherlands



info@sortiq.ai