Tarra — Privacy Policy
Last updated: 7 July 2026
Tarra is a Shopify application that helps merchants prepare German Extended Producer Responsibility (EPR / VerpackG) packaging data and generate report files. Tarra is a data-preparation and report-generation tool only: we do not register with LUCID, submit reports to any authority, or act as a merchant's authorized representative or dual system.
Who we are
Operator: Tarra. Support: info@swiip.app. Business address: Osmanağa Mah., Hasırcı Sok. No: 3, Kat 2, Daire 1401, Kadıköy, 34714 İstanbul, Türkiye.
What data we process
We follow data minimization and process only:
- Shop domain and the OAuth access token used to call the Shopify Admin API.
- Merchant settings: LUCID number (optional), packaging profiles, product/SKU-to-profile mappings, shipping-packaging preset, plan tier.
- From orders shipped to Germany, only the shipping country code and each line item's SKU, product type, and quantity.
- Generated reports and per-order packaging snapshots (composition and quantities only) retained as an audit trail.
We do not read or store customer names, addresses (beyond the country code), email addresses, phone numbers, or payment information.
Why we process it
Solely to compute packaging weight per material and generate an EPR report file that the merchant submits themselves. We do not use personal data for marketing, advertising, profiling, or automated decision-making, and we never sell personal data.
Storage, retention & security
- Encrypted database (at rest) with encrypted backups; TLS/HTTPS in transit.
- Test and production data are strictly separated.
- Access is least-privilege, protected by strong authentication, and logged.
- On uninstall or a
shop/redactrequest, all of that shop's data is permanently deleted.
Sub-processors
Shopify (source data), Supabase (encrypted database hosting), Fly.io (application hosting).
Your rights
We support Shopify's privacy webhooks (customers/data_request,customers/redact, shop/redact). We hold no customer identifiers beyond what is described above. Requests may also be sent to info@swiip.app.