KW Tech Dropship Privacy Policy

Last updated: October 20, 2026

KW Tech Dropship (the “App”) is operated by Nexus Haven Limited, a company registered in New Zealand and trading as KW Tech (“we”, “us”). This policy explains what information the App collects when a merchant installs it on their Shopify store, how we use it, and the choices merchants and their customers have.

1. Information we collect

• Store information: your shop domain, store currency and time zone, contact email for app notifications, and an access token Shopify issues so the App can work with your store.
• Products: product details you import from AliExpress, CJ Dropshipping or your own suppliers (titles, descriptions, images, variants, prices, stock, and any product reviews you import) and the matching Shopify product IDs.
• Orders: for orders that contain products imported with the App, the order number, items, prices, Shopify’s fraud-risk level, and the customer’s shipping name, address and phone number. We do not collect customer email addresses or payment information.
• Supplier accounts: the authorization token for the AliExpress account and the API key for the CJ Dropshipping account you connect, the names and order email addresses of custom suppliers you add, and the supplier order numbers and tracking numbers created for your orders.
• Settings and billing: your App settings, linked stores and which subscription plan you are on. Payments are handled by Shopify; we never see card details.
• Access logs: when order details are viewed in the App or on your store’s tracking page, we log the time, store, viewer type and order number (not the customer’s details) for security purposes.

2. How we use information

We use this information only to provide the App’s features:

• importing supplier products and publishing them to your store;
• placing orders with your suppliers on your behalf and sending the customer’s shipping details to that supplier so the order can be delivered;
• retrieving tracking numbers, marking your Shopify orders as fulfilled and showing order status on your store’s tracking page;
• keeping product prices and stock in sync, calculating your profit reports and applying your plan’s limits;
• emailing you about orders that could not be placed automatically.

We do not sell personal information and do not use it for advertising or for our own purposes.

3. Sharing

• Your suppliers: AliExpress or CJ Dropshipping receive order and shipping details through their APIs when an order is placed. For custom suppliers, the order and shipping details are sent by email to the supplier address you entered.
• Shopify receives the products, fulfillments and tracking information the App creates in your store.
• Email delivery: notification and supplier emails are sent through Google’s email service (Gmail SMTP).
• Linked stores: if you link several of your stores, they share supplier connections and can see each other’s order counts and profit totals.
• Hosting: the App and its database run on servers operated by us in New Zealand. Traffic reaches them over HTTPS through Tailscale’s encrypted relay.

We may disclose information if required by law.

4. Retention and deletion

• We keep store, product and order information while the App is installed.
• Customer shipping details are erased automatically 90 days after an order is fulfilled or cancelled.
• When a customer asks you to erase their data, Shopify notifies us and we remove that customer’s shipping details from our records.
• When you uninstall the App, Shopify notifies us and we delete all of your store’s data within 48 hours of Shopify’s redaction request, including products, orders, customer details, supplier credentials and custom suppliers.
• Daily backups are kept for 14 days and then deleted.

5. Security

Data is transmitted over HTTPS. Servers and backups are stored on encrypted disks, and supplier credentials are additionally encrypted with AES-256. Access to production systems is limited to our authorized staff, protected by strong passwords and two-step verification, and access to customer details is logged. We follow a written security incident response process and will notify affected merchants and Shopify without undue delay, and within 72 hours, if a breach affects personal information.

6. Your rights

Merchants and their customers may request access to, correction of or deletion of their personal information, in line with the New Zealand Privacy Act 2020, the GDPR and the CCPA where applicable. Customers should usually contact the merchant first; we will help merchants respond to such requests.

7. Changes

We may update this policy and will change the “Last updated” date when we do.

8. Contact

Nexus Haven Limited (KW Tech), Auckland, New Zealand
Email: contact@kwtech.co.nz