Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how EDI Engine: Wholesale & Retail ("EDI Engine", "we", "us", or "our"), available at https://www.ediengineapp.com, collects, processes, and protects merchant and order data when you install and use our application within your Shopify store.

EDI Engine operates as a technical data processor on behalf of Shopify merchants to parse, translate, and synchronize B2B wholesale Electronic Data Interchange (EDI) purchase orders (ANSI X12 850), shipping notices (ANSI X12 856), and commercial invoices (ANSI X12 810) with major retail networks (such as Walmart, Target, Amazon Vendor Central, Costco, and The Home Depot).

2. Information We Collect

We collect only the minimum necessary technical information required to fulfill wholesale EDI transactions:

• Merchant Store Identifiers: Store domain (e.g. your-brand.myshopify.com), primary contact email, and authorized Shopify OAuth access tokens (stored encrypted).
• Retail Trading Partner Configurations: Assigned vendor identification numbers, retailer ISA IDs, and standard carrier SCAC codes (UPSN, FDEG, RDWY, ODFL).
• Wholesale Order Data: Retailer purchase order numbers, line items (SKUs, UPC barcodes, wholesale Net 30 pricing, quantities ordered), and retail distribution center receiving warehouse addresses.
• Fulfillment & Tracking Metadata: Tracking numbers and carrier names passed through Shopify fulfillment webhooks to generate outbound 856 ASNs.

3. How We Use Information

We use collected information strictly to provide and maintain the EDI integration service:

1. Translating inbound ANSI X12 850 purchase orders directly into native Shopify Orders.
2. Routing unrecognized vendor orders into native Shopify Draft Orders tagged EDI-Quarantine for merchant authorization.
3. Generating compliant ANSI X12 856 Advance Ship Notices (ASNs) upon warehouse fulfillment.
4. Generating compliant ANSI X12 810 Commercial Invoices upon order settlement.
5. Executing pre-flight compliance audits to prevent retailer chargeback penalties.

No Data Brokering: We never sell, monetize, rent, or distribute merchant order streams, pricing data, or transaction history to any third parties or advertising networks.

4. Data Security & Retention

All data transmission between Shopify, EDI Engine, and retailer portals is encrypted in transit using industry-standard Transport Layer Security (TLS 1.3 / HTTPS). Merchant OAuth access tokens are encrypted at rest using AES-256 encryption.

We retain transaction logs for a rolling 90-day period solely for compliance audit and retailer certification purposes, after which raw transmission payloads are purged.

5. Shopify Mandatory Privacy Webhooks & GDPR Compliance

EDI Engine fully complies with Shopify’s mandatory privacy requirements under the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

6. Your Data Rights & Contact Information

Under applicable privacy laws, you have the right to access, rectify, port, or request deletion of your stored information. You may revoke access at any time by uninstalling the application from your Shopify Admin.