Last updated: 17 July 2026
This privacy policy explains how the Shopify app Order Alerts for Telegram ("the App"), operated by EpicPilot Labs ("we", "us"), handles information when you install and use it on your Shopify store.
In short: the App sends you a Telegram message when an order is placed or cancelled, or when stock runs low. It does not collect or store your customers' personal data — no names, email addresses, phone numbers, or shipping addresses are ever stored by us or included in your alerts.
The App is developed and operated by EpicPilot Labs, based in Lithuania (European Union). EpicPilot Labs is the data controller for the information described in this policy.
For any question or request relating to this policy or your data, contact support@epicpilotlabs.com. We aim to respond within two business days. Additional registration or contact details can be provided on request.
When you install the App, Shopify grants it permission to read certain information about your store. The App subscribes to notifications ("webhooks") for events you choose to be alerted about.
When one of your chosen events occurs, Shopify sends the App a notification containing information about that event. From it, the App uses only:
myshopify.com domain.Shopify's order notifications may technically contain personal data about your customers. The App deliberately ignores this. We do not use, store, or transmit:
None of this information appears in your Telegram alerts, and none of it is written to our database. Event data is processed in memory only, for the moment it takes to compose your alert, and is then discarded.
To make the App work, we store the following in our database:
| What | Why |
|---|---|
| Your Telegram bot token | So the App can send messages through the Telegram bot you created. Stored so alerts continue to work without you re-entering it. |
| Your Telegram chat ID | To know which chat or group should receive your alerts. |
| Your store name and domain | To identify your store in your alerts and to associate your settings with your store. |
| Your alert preferences | Which alerts you enabled and your low-stock threshold. |
| Shopify session data | The access token Shopify issues so the App can operate on your store. Managed by Shopify's standard app libraries. |
| Support messages | If you use the in-app "Need help?" form, we receive the email address and message you submit, so we can reply. |
All of this relates to you and your store — not to your customers.
No. The App does not request, use, or retain personal data about your customers or your store's visitors. We have not requested access to Shopify's protected customer data fields (name, email, phone, address).
We use the information described above solely to:
We do not sell, rent, or share your information for advertising or marketing. We do not use it for automated decision-making or profiling.
The App runs on servers located in Frankfurt, Germany (European Union), and its database is hosted in the European Union. Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers.
We rely on the following providers to operate the App. Each processes only what is necessary for its function:
The App supports Shopify's mandatory privacy webhooks:
customers/data_request — as we hold no customer personal data, there is nothing to provide.customers/redact — as we hold no customer personal data, there is nothing to delete.shop/redact — all data for your store is deleted.If you would like a copy of the data we hold about your store, or want it deleted before uninstalling, email support@epicpilotlabs.com and we will action it.
Depending on where you are located (for example, under the GDPR in the EU/EEA or the UK, or the CCPA in California), you may have rights to access, correct, delete, or export the personal data we hold about you, and to object to or restrict its processing. Since the data we hold relates to your store account, you can exercise most of these rights directly — by changing your settings in the App, or by uninstalling it, which triggers deletion. For anything else, contact support@epicpilotlabs.com.
If you are in the EU/EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
Your Telegram bot token is stored in our database and is never displayed back to you or exposed to your browser after saving. All connections between Shopify, the App, and Telegram use encrypted HTTPS/TLS. Incoming notifications from Shopify are cryptographically verified before being processed. Access to our production systems is restricted to the App's operator.
Please note that the alerts themselves are delivered through Telegram and are subject to Telegram's own privacy practices and to the security of the chat or group you connect. You control which chat receives them, and you can change or disconnect it at any time in the App.
The App is a business tool intended for Shopify merchants and is not directed at children.
We may update this policy as the App evolves or as legal requirements change. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to merchants where appropriate.
Questions, requests, or concerns about privacy:
EpicPilot Labs
Lithuania, European Union
support@epicpilotlabs.com
Further registration details are available on request.