Parcira Data Processing Agreement

Last updated: July 2026

This Data Processing Agreement ("DPA") applies automatically to every merchant who installs Parcira on their Shopify store, and governs how Parcira ("Processor") processes personal data on behalf of the merchant ("Controller").

1. Subject matter and duration

Parcira processes customer order and shipment data solely to provide parcel-tracking functionality to the merchant's store, for as long as the app remains installed.

2. Nature and purpose of processing

Order number, customer name, email, phone number, carrier, and tracking number are processed to match a customer to their order and display shipment status. No other use is made of this data.

3. Subprocessors

Parcira will notify merchants of any change to this subprocessor list.

4. Security measures

Encryption in transit and at rest, least-privilege access control, and a defined data retention limit (see our Privacy Policy).

5. Data subject requests

Parcira automatically handles Shopify's mandatory GDPR webhooks (customer data requests, customer redaction, shop redaction) and will assist the merchant with any additional data subject request within a reasonable timeframe.

6. Deletion on uninstall

All data associated with a merchant's store is deleted within 48 hours of the app being uninstalled.

7. Contact

Questions about this agreement can be sent to contact@parcira.com.

This document is provided as a good-faith description of Parcira's data processing practices and does not replace independent legal review.