Order Privacy for Self-fulfilling Vendors

Draft

This page is a stub. It captures the intended structure of the BoxNCase Platform documentation; the details are being written as the platform ships. Questions: [email protected].

Principle

A vendor that fulfils its own orders owns the customer relationship. Order details live in the vendor's isolated stack; BoxNCase sees only what is needed to operate the marketplace and settle payments.

Data boundaries

Data	Vendor stack	BoxNCase platform
Customer identity and addresses	Yes	No (marketplace orders: only the shipping address needed for the vendor)
Order lines and pricing	Yes	Aggregate totals for settlement
Payment instrument	Stripe (vendor's connected account)	Never stored
Fulfilment and tracking	Yes	Tracking number mirrored to the marketplace order

Outline (to be written)

• Permission groups recommended for vendor staff
• Metadata keys the platform writes on orders (and which are private)
• Data export and deletion requests