Courier HubPrivacy policy
AppNex Technologies operates Courier Hub, a shipping app for CRM accounts.
Where your data is kept
Almost everything stays in your own CRM account:
- Shipments are opportunities in your shipments pipeline: recipient, courier, tracking number, status history and cash-on-delivery amounts, in the opportunity's fields.
- Your settings and your courier account credentials are custom values in your account. Credentials are encrypted with AES-256-GCM first, so they can't be read there, and are never shown again after you save them.
- Status updates also go onto the recipient contact (fields, tags and notes) and onto store orders, as you configure.
Our servers keep only the access token your CRM issues when you install the app (encrypted), the id of the shipping carrier the app adds to your store (for courier rates at checkout), your account's business contact as your CRM's business profile has it (name, email and phone, so we can reach you about the app), short-lived entries such as pending updates (deleted once delivered) and duplicate-booking guards (expire within weeks), hourly counts of your shipments for your account's reports (how many reached each status, by courier and service, with their cash-on-delivery amounts and shipping fees; never addresses, names or tracking numbers) for 62 days, with a hashed mark for each shipment and status so none is counted twice (64 days), and operational logs. Daily totals of these counts are also kept in our reporting system for up to 25 months; the account's own figures are deleted with its data. Your subscription and monthly usage are recorded in our own CRM account.
Who we share it with
Shipment details go only to the courier you choose for that shipment, and into your own CRM account. When your store asks for shipping rates at checkout, the destination address and cart weight are used to get prices from your couriers and are not stored; the customer's name and contact details are not used. Addresses may be sent to Google's geocoding service if you add your own Google Maps key (needed for Lalamove). We don't sell data or use it for advertising.
Retention and deletion
Shipments live in your CRM for as long as you keep them there; delete the opportunities to delete them. Uninstalling the app stops it right away: the stored access token is deleted and the app is removed from your store's shipping carriers. Everything else the app keeps for your account (pending updates, duplicate-booking guards, your shipment counts, your business contact and your subscription as it stands) is kept for 30 days after an uninstall, then deleted, so installing the app again within those 30 days carries on where you left off. After them the subscription is cancelled; its record and your usage are kept for accounting. Your settings and courier credentials are custom values in your own account, which the app can't reach once it's uninstalled: they stay there (the credentials encrypted, and useless without the app) until you delete the custom values named "Shipping · …". While the app is installed, an admin of the account can delete all of it from the Subscription tab ("Delete all my data"): the app stops at once and, 7 days later unless an admin undoes it, deletes your settings and courier credentials from your account, removes itself from your store's shipping carriers and deletes what our servers keep for the account, its shipment counts included. Invoices, payment records and the record of the cancelled subscription are kept, as the law requires; your shipments stay in your CRM. Contact us to delete anything else.
Security
All traffic is encrypted (HTTPS). Secrets are encrypted at rest with keys held outside the database. Webhooks are verified before they are processed.