Last Updated: December 18, 2025
Company: Milkyway X, Inc. (“Milkyway,” “we,” “us,” “our”)
Website:milkywaydelivery.com
Contact: support@milkywaydelivery.com
1. Scope and Who This Policy Covers
This Privacy Policy explains how Milkyway collects, uses, discloses, and protects information when:
You visit our website,
A Merchant installs or uses the Milkyway Delivery Shopify app,
A delivery or return is requested through the platform,
You communicate with us (support, email, SMS).
Important context: Milkyway operates a technology platform that connects Merchants with independent third-party courier networks and delivery service providers (“Couriers”). Milkyway does not employ couriers or operate a delivery fleet.
2. Definitions
Merchant: A business that uses Milkyway to request delivery or return services.
Customer/Recipient: A person receiving or returning a package associated with a Merchant order.
Courier: Independent third-party delivery provider (including courier networks) that completes the delivery service.
Personal Information: Information that identifies, relates to, describes, or could reasonably be linked with an individual or household.
3. Information We Collect
A. Information Merchants Provide or That We Receive From Shopify
We may collect:
Merchant contact information (name, business name, email, phone)
Shopify store identifiers and shop/account details
App configuration settings and preferences
Order and fulfillment details needed to create delivery requests (order ID, pickup and drop-off address, recipient name, recipient phone number, delivery instructions, package details, declared value if applicable)
B. Delivery and Return Transaction Information
We may collect:
Delivery request details (pickup/drop-off info, instructions, timing preferences)
Delivery status events (accepted, picked up, delivered, failed)
Photo Proof of Delivery or other completion evidence provided by the courier network (where available)
Communications related to a delivery (support tickets, claim submissions, dispute messages)
C. Website and App Usage Data
We may automatically collect:
IP address, device identifiers, browser type, OS
Log data and approximate location derived from IP
Pages viewed, clicks, referral URLs, time on page
App usage events (features used, actions taken)
D. Marketing and Advertising Data (Cookies, Pixels, Tags)
If you interact with our website or ads, we (and our partners) collect information via cookies/pixels and similar technologies to measure performance and improve advertising.
This may include:
Cookie IDs and device IDs
Ad impressions and click activity
Conversion events (for example: visiting our pricing page, installing the app, booking a demo)
4. How We Use Information
We use Personal Information to:
Provide and operate the Milkyway platform and app
Create, route, and manage delivery/return requests
Communicate delivery status updates to Merchants and, when enabled, to recipients
Provide customer support, handle issues, and process protection-policy related requests
Prevent fraud, abuse, or unauthorized use
Improve product performance, reliability, and analytics
Send service announcements and administrative messages
With appropriate choices available, market Milkyway to prospective Merchants (ads, newsletters, remarketing)
Comply with law, enforce agreements, and protect rights and safety
5. How We Disclose InformationWe may disclose Personal Information to:
A. Courier Networks and Couriers (Delivery Fulfillment)
We share necessary delivery details (recipient name, address, phone number, delivery instructions, and package details) with courier networks and couriers so they can complete the requested service.
B. Shopify and Integrations
We use Shopify and Shopify APIs to receive order details, update delivery status, and support merchant workflows. Shopify also has its own privacy practices.
C. Service Providers (Vendors)
We use vendors to help operate our business (hosting, databases, customer support tools, analytics, email/SMS sending, fraud prevention). They are permitted to process Personal Information only to perform services for us and as otherwise allowed by contract.
D. Advertising Partners
We may share information about interactions with our website and ads with advertising partners (for example, Meta and Google) to measure ad performance and improve campaign targeting. Depending on your state of residence, this may be considered “sharing” for cross-context behavioral advertising.
E. Legal, Safety, and Business Transfers
We may disclose information to comply with legal process, respond to lawful requests, enforce agreements, prevent harm, or in connection with a merger, acquisition, or asset sale.
6. Cookies and Similar TechnologiesWe use cookies and similar tools for:
Essential website operations,
Analytics and performance,
Advertising and measurement.
You can control cookies through browser settings and, where enabled, through our cookie preference tools. Blocking cookies may impact site functionality.
7. Your Privacy Choices
A. Marketing Emails
You can opt out of marketing emails using the unsubscribe link in those messages.
B. SMS
If you receive SMS messages related to deliveries or support, you can opt out by replying STOP (where applicable). Message and data rates may apply.
C. Targeted Advertising Opt-Out
Depending on where you live, you may have the right to opt out of targeted advertising or “sharing” for cross-context behavioral advertising.
8. California Privacy Notice (CCPA/CPRA)
If you are a California resident, you may have rights to know/access, delete, correct, and opt out of sale/sharing of Personal Information, and to limit certain uses where applicable. CPRA regulations also expect clear Notice-at-Collection style disclosures (categories, purposes, sold/shared, retention).
A. Do We “Sell” or “Share” Personal Information?
We do not sell Personal Information for money.
We may share certain identifiers and internet/activity information with advertising partners for cross-context behavioral advertising (for example, remarketing). This is the area covered by “Do Not Sell or Share” under California law.
B. Opt-Out of Sale/Sharing
You can opt out by:
1. Emailing us at Support@milkywaydelivery.com, or
2. Using browser-based opt-out preference signals where supported (such as Global Privacy Control).
C. Categories Collected, Purpose, and Retention
We collect categories such as: identifiers (name, email, phone), commercial/order data, delivery/fulfillment data, internet/activity data, and location (approximate via IP, and delivery addresses for fulfillment). We retain Personal Information only as long as reasonably necessary for the purposes described, including:
Merchant account data: for the life of the Merchant account, plus up to 7 years for tax, accounting, and legal obligations
Delivery transaction records: typically 24 months (longer if needed for disputes, fraud prevention, or legal claims)
Photo proof of delivery: typically 180 days (longer if needed for disputes, claims, or legal obligations)
Support communications: typically 24 months
Marketing and analytics data:, subject to cookie settings and opt-out up to 24 months, subject to cookie settings and opt-out
D. Submitting Requests
To submit a privacy request, email support@milkywaydelivery.com with subject line: “Privacy Request.” We may need to verify your identity and/or your authority (for authorized agents) consistent with applicable law.
9. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information. No method of transmission or storage is 100 percent secure.
10. International Users
We are based in the United States. If you access our services from outside the U.S., your information may be processed in the United States and other jurisdictions where our vendors operate.
11. Children’s Privacy
Our services are not directed to children. We do not knowingly collect Personal Information from children.
12. AI-Assisted Support (Limited Use)
We may use automation and AI-assisted tools to help with customer support tasks (for example: categorizing tickets, drafting responses, summarizing non-sensitive context). We do not intend to submit sensitive customer data (such as full delivery addresses or phone numbers) into general-purpose AI tools for ad hoc prompting.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last Updated” date. Material changes may also be communicated through the website or app.
14. Contact
Questions or requests: support@milkywaydelivery.com