Skip to main content
PO Relay
Draft. This policy has been drafted from the product's actual data-handling design and Anchor Web Co's business details. It is pending a final review pass before publication (removal from noindex) and before being linked from the Shopify listing.

Privacy Policy

Last updated: 13 September 2026

Who we are

PO Relay is operated by Anchor Web Co (ABN 82 465 541 845), an Australian business based in Queensland, Australia. For our registered business address, contact us at support@po-relay.com.

What data we collect

Data received via the Shopify Admin API — shop details, staff accounts, product catalogue, customer and company records, and draft orders. Data received from merchant-uploaded or emailed purchase order documents — supplier names, line items, prices, and buyer/customer references where present.

How we use data

Data is used solely to extract purchase orders and create Shopify draft orders on the merchant's instruction. It is not used for advertising, resold, or used for any purpose unrelated to operating the app.

Sub-processors

PO Relay is hosted on Amazon Web Services (compute, storage, database) in the US East (N. Virginia) region (us-east-1), and uses Amazon Textract for document text extraction, Amazon Bedrock for extraction models, and Amazon SES for inbound email intake and outbound notifications.

Data retention and deletion

Uploaded source documents are retained for 30 days by default (merchant-configurable to 7 or 90 days); minimised import history is kept for 180 days. Uninstalling the app queues deletion of shop data within 7 days, and no recoverable customer content remains after 35 days from a deletion or uninstall request. Shopify's mandatory customers/data_request, customers/redact and shop/redact webhooks are implemented and honoured on receipt.

Data storage location

All application data is stored and processed in AWS's US East (N. Virginia) region (us-east-1).

Your rights

A merchant Administrator can request a full export of their shop's data in-app, delivered through an authenticated, time-limited download link. A merchant or their customer can request access, correction or deletion of their data at any time by emailing support@po-relay.com, or by uninstalling the app to trigger deletion as described above.

Contact

Privacy questions: support@po-relay.com