Privacy Policy
Last updated: 9 October 2026
This policy explains what ColiSwift (« we ») does with personal data when you use coliswift.com and the ColiSwift platform (admin.coliswift.com). It applies to sellers who open an account, to the people who use the platform on a seller's behalf, and to the customers whose orders are processed through it.
1. Who we are
ColiSwift is an e-commerce fulfilment platform operated by ColiSwift. Questions about this policy: contact@coliswift.com.
2. Data we collect from sellers
account details (name, e-mail, phone, company, country), store information, products and prices, orders and their status, invoices and payouts, support messages, and technical logs (IP address, browser, pages visited) needed to run and secure the service.
3. Data we process on behalf of sellers
the orders a seller receives contain their customers' name, phone number, delivery address and purchased items. We process this data only to confirm, prepare, ship and deliver the orders, handle returns and produce the seller's invoices. The seller remains responsible for having a legal basis to collect it.
4. Data from connected services
when a seller connects a store (Shopify, YouCan, WooCommerce) or a Google Sheets file, we receive the orders or rows that the seller chose to synchronise, and a credential (token) allowing that access. Tokens are stored encrypted and used only for the connection the seller set up.
5. Google user data
when you click « Connect Google », we request the drive.file permission, which only gives ColiSwift access to the spreadsheet files you explicitly select in the Google file picker — never to the rest of your Google Drive. We read the rows of the selected sheet to create your orders and write the import status back into the sheet's status column. We also receive your Google account e-mail to display which account is connected. ColiSwift's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: this data is used only to provide the Google Sheets import feature, is never sold, is never used for advertising, and is never shared except with the seller who connected the file. You can revoke access at any time from the Integrations page or from your Google account permissions (myaccount.google.com/permissions); we then delete the stored token.
6. Why we use the data
to provide the service (order confirmation, warehousing, delivery, invoicing), to keep it secure, to support you, to comply with legal obligations, and to send service messages (daily import summaries, connection alerts). We do not sell personal data and we do not use it for third-party advertising.
7. Who receives the data
our staff involved in operations (confirmation agents, warehouse and delivery teams) under confidentiality obligations, delivery partners for the countries where we ship, payment and banking providers for payouts, hosting and e-mail providers, and the connected services listed above. Each receives only what is needed for its role.
8. Retention
account data for the life of the account and the legal retention period of invoices afterwards; order data as long as the seller's account is active and as required for accounting; raw imported rows kept 30 days for troubleshooting, then deleted; connection tokens deleted on disconnection; logs up to 12 months.
9. Security
encrypted connections (HTTPS), encrypted storage of credentials, role-based access inside the platform, logging of sensitive actions, regular backups.
10. Your rights
you can access, correct, export or delete your personal data, object to a processing or withdraw a consent by writing to contact@coliswift.com. Customers of a seller should contact the seller first; we assist the seller in answering. You may also complain to your data protection authority.
12. Changes
we may update this policy; the date at the top changes and significant changes are announced in the platform.