EuroDelivery policies

EuroDelivery is a shipment tracking platform. Merchants connect their online store to EuroDelivery, sync their shipments and host a branded tracking page where their customers can follow each order in real time.

These policies describe how the EuroDelivery platform works and how we handle data. Individual merchants (our customers) are responsible for their own store policies, product content, shipping promises and customer support — those appear on each merchant's own tracking page under /track/<store>.

1. Store connection. A merchant connects their online store to EuroDelivery through a secure authorization flow. We store only the access needed to read shipment data and keep tracking information updated.

2. Shipment import. EuroDelivery imports shipment details from the connected store. Only the fields needed for tracking are stored: order number, customer name and email, shipping address, line items, fulfillment status, carrier data and timestamps.

3. Tracking sync. When a shipment is marked as dispatched, EuroDelivery keeps the tracking number, carrier and tracking link aligned between the store, the carrier and the customer-facing tracking page.

4. Carrier tracking sync. EuroDelivery periodically syncs shipment status from the connected carriers, so the tracking page reflects the latest checkpoint reported by each carrier without the merchant having to update it manually.

5. Tracking page. The customer opens the branded tracking page and sees a dynamic timeline (created → processed → in transit → out for delivery → delivered) built from the carrier updates and the merchant's configured delivery time.

6. Notifications (optional). When the merchant configures their own SMTP credentials, EuroDelivery sends dispatch and delivery emails from the merchant's own address.

7. Where the platform runs. The merchant dashboard is available only at app.eurodelivery.xyz. The root domain eurodelivery.xyz is the public tracking portal for end customers; it does not expose merchant tools.

Acceptance. By creating an account or connecting a store to EuroDelivery, you agree to these terms.

Eligibility. You must be at least 18 years old and legally able to enter into a contract. You are responsible for keeping your credentials confidential.

Merchant responsibilities. You are solely responsible for the products you sell, the shipping and delivery you promise to your customers, the accuracy of order and address information, tax and customs compliance, and the content of your branded tracking page and store policies.

Service availability. EuroDelivery is provided on an "as available" basis. We aim for high availability but we do not guarantee uninterrupted service and may perform maintenance, updates or changes at any time.

Suspension. We may suspend or terminate access to accounts that violate these terms, the Acceptable Use policy, or applicable law, or that put the platform, carriers or end customers at risk.

Liability. To the maximum extent permitted by law, EuroDelivery is not liable for indirect, incidental or consequential damages, lost profits, or losses caused by carrier delays, incorrect addresses, customs holds or third-party service outages.

Changes. We may update these terms; the latest version is always available on this page with a "last updated" date.

Who is the controller. For merchant account data (name, email, login), EuroDelivery is the data controller. For end-customer data imported from the connected store (recipient name, address, order details), EuroDelivery acts as a data processor on behalf of the merchant, who is the controller.

Data we collect.

• Merchant account: email, encrypted password, role, store settings, SMTP configuration (password encrypted with AES-256-GCM at rest).
• Store data: shop domain, access token, orders, line items, customer name and email, shipping address, fulfillment status.
• Tracking activity: tracking code, carrier, generated timeline events, delivery status, timestamps.
• Email logs: recipient, subject, template used, delivery status (when merchant-configured email is enabled).
• Technical logs: request timestamps and error diagnostics for security and troubleshooting.

Why we process it. To provide the tracking service, sync shipment updates with the connected store and carriers, render tracking pages, send merchant-branded notifications, prevent abuse, and comply with legal obligations.

Legal bases (GDPR/UK GDPR). Contract (to provide the service you signed up for), legitimate interests (security, fraud prevention, product improvement) and legal obligation where applicable.

Sharing. We do not sell personal data. We share data only with the sub-processors listed below and only to the extent needed to run the service, or when required by law.

Retention. Order and tracking data are retained while the merchant's account is active and for up to 12 months after account deletion, unless a longer retention period is required by law. Email logs are retained for up to 90 days. Merchants can request earlier deletion.

Your rights. Under GDPR/UK GDPR and similar laws, you may request access, correction, deletion, portability, restriction or objection. End customers should contact the merchant first; if the merchant is unresponsive, they can contact us at support@eurodelivery.xyz and we will forward the request.

International transfers. Data may be processed in the EU, UK and US by our sub-processors under standard contractual clauses where required.

EuroDelivery uses a minimal set of cookies and similar technologies:

• Strictly necessary: authentication and session cookies for the admin dashboard (app.eurodelivery.xyz). Without them the dashboard cannot function.
• Functional: preferences such as language or last-viewed store.
• Local storage: a short-lived auth token issued by our backend, stored in the browser's local storage on app.eurodelivery.xyz.

The public tracking page (eurodelivery.xyz and merchant tracking pages) does not require cookies to display tracking information. Some merchants may add their own analytics or marketing pixels on their tracking page — those cookies are set by the merchant and are governed by the merchant's cookie policy.

You can clear cookies and local storage at any time from your browser settings; doing so will sign you out of the dashboard.

You agree not to use EuroDelivery to:

• Misrepresent shipping status to customers or payment providers.
• Deceive end customers about origin, carrier, delivery time or product content.
• Send unsolicited bulk email through the platform's SMTP integration.
• Circumvent rate limits or terms of service of any connected platform or carrier.
• Upload or process content that is illegal, infringing, harmful, or that contains malware.
• Attempt to access other merchants' data, reverse-engineer the platform, or interfere with its operation.

Violations may result in immediate suspension. Serious or repeated violations may be reported to payment providers or law enforcement.

To operate the service, EuroDelivery relies on the following sub-processors:

• Supabase — managed PostgreSQL database, authentication and storage (EU/US regions).
• Cloudflare — DNS, CDN and edge runtime for the application.
• Merchant's own SMTP provider (e.g. Resend, SendGrid, Brevo, Mailgun, Amazon SES, Gmail) — used only when the merchant configures email in their store settings. Credentials are stored encrypted and used solely to send that merchant's tracking notifications.

Passwords and SMTP credentials are encrypted at rest with AES-256-GCM. Traffic between the customer and the platform is served over HTTPS.

A written data processing agreement (DPA) is available on request for merchants operating in jurisdictions that require one.

EuroDelivery is currently offered as an invited service; subscription details, pricing and refunds are defined in the individual agreement between the merchant and EuroDelivery.

Unless otherwise agreed in writing:

• Fees are billed in advance for the selected billing period and are non-refundable for the current period.
• Merchants may cancel at any time; access continues until the end of the paid period.
• Refunds may be granted at our discretion for confirmed platform outages that materially prevent use of the service.
• Refunds for end-customer purchases are the sole responsibility of the merchant that made the sale and must be requested through that merchant's own return/refund policy.

EuroDelivery (platform). Provides the software: shipment import, carrier tracking sync, branded tracking pages and optional email delivery. Does not ship physical goods and is not a carrier.

Merchant. The online store owner. Owns the customer relationship, the product, the shipping promise, the refund policy and any tax or customs obligations. Configures the branded tracking page, delivery time, timezone and SMTP.

End customer. The person buying from the merchant and using the tracking page. Support requests about specific orders should be sent to the merchant listed on that tracking page.

Questions about these policies or the platform:

support@eurodelivery.xyz

For requests concerning a specific shipment or refund, please contact the merchant shown on the tracking page — they are the seller of record for that order.