Privacy Policy
Last updated: October 11, 2026
Who we are
Order Relay is a BigCommerce app operated by Andrew Block, trading as Plugin Bakery, a sole proprietorship based in California, United States ("we", "us").
Contact: support@pluginbakery.com
Our two roles
This policy covers two kinds of data, and our responsibilities differ for each.
Your store's data — we are the controller. Information about your store, your settings and your use of the app.
Your customers' data — we are a processor. When we post an order notification, we handle your customers' details on your instructions. You decide what we send, through the settings in the app. You remain the controller of that information, and your own privacy notice to your customers should cover it.
What we store
About your store
| What | Why | How long |
|---|---|---|
| Store hash, BigCommerce store ID, store name, domain | To identify your store and label notifications | Until deleted (see Retention) |
| BigCommerce access token (encrypted) | To read order details when an order arrives | Until deleted |
| Webhook credentials (secret encrypted) | To verify that incoming order events are genuinely from your store | Until deleted |
| Store profile: name, domain, control panel URL, weight units, currency | To format notifications and link to your orders | Cached 1 day |
| Connection health records | To detect and repair a broken connection to BigCommerce | Until deleted |
We do not store your store owner's name, phone number, business address or admin email, even though BigCommerce makes them available to us.
About your staff
| What | Why | How long |
|---|---|---|
| The email address of whoever last changed a channel's settings | So you can see who changed what gets posted | Until changed again, or deleted |
| Session token (your user ID, email, and whether you're the store owner) | To keep you signed in while using the app | 24 hours, held only in your browser's memory. Never stored on our servers. |
| IP address and browser user agent | Recorded in our web server's access logs | 14 days |
| A record of each change to a notification channel: what changed, the channel's name at the time, and the email address of the staff member who made it | So you can see who changed a channel and when, including a change to the Discord address your orders are sent to | 90 days |
We do not use cookies and we do not store server-side sessions.
Changes the app makes on its own carry no email address, only a reason: a channel created at install, switched on by its first successful message, or switched off because the app was uninstalled. No part of a Discord webhook address is ever recorded in this history.
About your settings
Channel names, the Discord webhook's own name, the webhook URL (encrypted, and never displayed again once saved), and your notification rules. Kept until you delete them or your store's data is removed.
About your customers
We do not store your customers' personal details as records.
When an order arrives, we fetch the full order from BigCommerce. BigCommerce returns the complete order record, which includes your customer's street address and phone number. We use only the fields your rules allow when building the notification, and discard the rest.
Depending on your settings, the notification may include the customer's name, email address, shipping city, state and country, the items ordered, order totals and payment method.
Street addresses and phone numbers are never included in a notification, never stored, and never written to our logs. They exist only in memory while the notification is being built, and are discarded with the rest of the order data.
That information exists on our systems only while the notification is being delivered, normally a few seconds. If a delivery fails, it is held for up to 7 days while we retry, then deleted. It is excluded from our backups and never written to our logs.
About your orders
We keep a record of each order status change and what we did about it: the order number, the status change, which channels were notified, and any error returned. This record contains no customer details. Kept for 90 days.
Where your data goes
BigCommerce — the source. We read your orders and store details, and register our webhook with them. We also register an email address with BigCommerce so they can alert us if your connection breaks.
Discord — the destination you choose. We post exactly what your rules allow to the channel you configure. Once a message is posted it is subject to Discord's terms and retention, and we cannot edit or delete it. Product images in notifications are loaded by Discord directly from BigCommerce. Discord is currently the only destination we support. If we add others, we will update this policy before they become available.
DigitalOcean — our hosting provider. Servers in San Francisco, California, United States.
Backblaze — encrypted nightly backups of our database, stored in their us-west-004 region (Sacramento, California, United States) and kept for 30 days.
Google — receives our support email and alerts from BigCommerce about broken connections. These contain store and connection details, never customer data.
What we don't do
- No analytics, advertising or tracking of any kind
- No error-reporting or monitoring services
- The app and our guide load nothing from third-party domains
- We do not sell, rent or share your data with anyone beyond the services listed above
International transfers
We are based in the United States, and all the services we use store data in the United States.
If you or your customers are in the European Economic Area, the United Kingdom, or another region with data transfer restrictions, installing Order Relay means your data is transferred to and processed in the United States. We do not currently offer Standard Contractual Clauses or a Data Processing Agreement. If your obligations require either, Order Relay may not be suitable for your store.
Retention
| Order event records | 90 days |
| Notification channel change records | 90 days |
| Failed delivery details (may contain customer details) | 7 days |
| Store profile cache | 1 day |
| Application logs | 14 days |
| Web server access logs | 14 days |
| Encrypted backups | 30 days |
| Your settings and store record | Until you uninstall, then 90 days, then deleted |
If you uninstall and reinstall within 90 days, your channels and rules are still there.
How we protect it
- Everything travels over HTTPS
- Access tokens, connection secrets and webhook URLs are encrypted at rest
- A webhook URL cannot be read back out of the app once saved
- Webhook URLs are automatically stripped from our logs and stored error messages
- Each store's connection is authenticated with its own secret
- Backups are encrypted before leaving our server
- Our automated tests fail if customer details ever reach our logs
Order Relay is operated by one person. We don't employ staff, and nobody else has access to our systems.
Your rights
Merchants can ask us to provide, correct or delete your data at any time. Email support@pluginbakery.com. Deletion removes your store record, settings and order history; backups containing it age out within 30 days.
Shoppers — if you are a customer of a store using Order Relay, that store is responsible for your data. Please contact them directly. If they forward your request to us, we will act on their instructions.
Uninstalling
When you uninstall, we immediately stop notifications and remove our connection to your store. Your settings are kept for 90 days in case you reinstall, then deleted.
Your responsibilities
You choose which customer details appear in your notifications, and who can see the channel they're posted to. Customer email addresses and shipping locations are off by default. If you turn them on, everyone with access to that channel can see them. Your own privacy notice to your customers may need to cover this.
Changes
We'll update this page if this changes, and update the date at the top.