Privacy policy

Effective date: 2026-08-13

Data controller: chlabs · 4 rue de Broglie, 93110 Rosny-sous-Bois, France · cheaply.fr@gmail.com

Purpose and information processed

This service creates Chronopost shipping labels for merchant orders selected in Amazon Seller Central or Shopify and, when separately enabled, confirms tracking to Amazon. It processes seller, shop and marketplace identifiers, encrypted authorization credentials, app-subscription status, order identifiers and status, recipient delivery/contact data, parcel dimensions and weight, selected service, customs information, insurance selection, label and tracking metadata.

Sharing

Amazon or Shopify supplies the authorized order data needed for the merchant-selected workflow; Amazon receives shipment confirmation only when that separate feature is enabled. Shopify also supplies authenticated app identity and subscription status. Chronopost receives the reviewed recipient, parcel and customs data needed to carry the shipment. Google Cloud Firestore hosts the encrypted application database in Google Cloud europe-west9 (Paris, France). Data is not sold, used for advertising, or shared with shipping-rate resellers.

Storage and retention

Recipient and customs previews are encrypted per business and expire after 15 minutes. Label PDFs and shipment metadata are retained for authenticated re-download, cancellation auditing, and duplicate-purchase prevention until the business deletes its account. The browser extension may also retain up to 20 recent labels per Amazon order in that browser profile for local recovery. Browser refresh sessions expire within 30 days and rotate on use. Redacted security logs are retained for 365 days. Application-level database backups are not retained on the current hosting plan.

Controls and security

Users can revoke sessions, disconnect Amazon, remove Chronopost credentials, or permanently delete business data. Shopify merchants can uninstall the app to revoke Shopify access and can contact the controller for deletion. Secrets are kept on the hosted service, tenant credentials are encrypted with AES-256-GCM, and browser clients receive short-lived authenticated sessions rather than Amazon or Chronopost credentials.

Contact and rights

For access, correction, deletion, restriction, objection, portability, security reports, or support, email cheaply.fr@gmail.com. You may also contact the competent data-protection authority.