Last updated: October 20, 2026
We are committed to protecting your personal data. When you contact us through our website, submit a form, or use our AI chatbot, we collect the information you provide (such as name, email, company, and country) solely for the purpose of responding to your inquiry and providing our services.
We process your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable. Your data may be stored and processed using secure cloud infrastructure. We do not sell your personal data to third parties.
To protect your account, we log sign-ins to the portal: the time, a device identifier stored in your browser, the browser and operating system type, and an approximate location (country and city) derived from your IP address. We do not store your full IP address. We use this only to keep your account secure and to enforce our Terms of Use, and we delete it after 90 days.
You have the right to access, correct, or request deletion of your personal data at any time by contacting us at la@xatlantica.com.
We can reach you over WhatsApp and e-mail about your account and your shipments. This is how those channels handle your data:
When a client connects an online store or an Amazon seller account, we receive the orders the store sends to us for fulfillment. For each order we receive the ship-to name, company, address and phone number of the store's customer, the items, the shipping method and any order note. We do not keep the customer's e-mail address from the store.
We use this data only to pick, pack and ship the order, to print the shipping label, and to send the tracking number back to the store. We do not use it for marketing and we do not sell it. We act as a processor for the store owner under our Data Processing Addendum.
How long we keep it: for Amazon orders we receive through our app, we delete the customer’s name, address and phone number from all our systems 30 days after the order is delivered; if an order never ships, 30 days after it was received or cancelled. Afterwards we keep only the state and country, for reports. For Shopify, WooCommerce and Shopware orders, we keep the ship-to data with the order record for as long as we provide fulfillment services to the store owner, and afterwards as long as needed for returns, carrier claims, tax and other legal records. Other order records in our warehouse order system are kept for as long as needed for our business, tax and legal records. Our warehouse order system provider receives an Amazon order’s ship-to data only to pick, pack and ship it. Our staff see a customer’s address only when they need it for an order, and each such view is logged.
When a store owner or Shopify asks us to delete a customer's data, we delete it promptly, at the latest within 30 days; Shopify's automatic deletion requests are carried out the same day. Requests for a copy of the data are answered to the store owner within 30 days.
When a store removes our app or disconnects, we stop receiving its orders and delete the access keys we held for it. When Shopify asks us to erase a store's data after it removes our app, we delete the customer data of all of that store's orders.
Carriers, our label provider (EasyPost) and our warehouse order system receive the ship-to data needed to deliver the parcel. Our hosting provider (Supabase) stores it for us. The full list of providers, and how we protect this data, is on our Security and data protection page.
Store owners and their customers can write to office@xatlantica.com about this data.
For questions about your personal data or this policy, please contact us:
Xatlantica LLC
17350 State Hwy 249, STE 220 #8586
Houston, TX 77064
Email: la@xatlantica.com
Our full Terms & Conditions apply alongside this policy. How we protect data is on our Security and data protection page.
Last updated 2026-10-20 · reviewed by Xatlantica LLC
How we protect client and end-customer data: Security and data protection