Home / Documentation / 6. Plans, Billing & GDPR
Guide 06 of 06 · Security & Billing 5 min read

Plans, Tracked Shipments Quota, Billing & GDPR Privacy

Understand Free (100 alerts / 20 tracked shipments) vs. Pro ($9.99/mo · 1,000 alerts / 300 tracked shipments), 2-layer delay quotas, and GDPR compliance.

Plans & Native Shopify Billing API

Tada Alerts uses the official Shopify GraphQL Billing API (appSubscriptionCreate). All subscription charges appear directly on your standard monthly Shopify invoice — we never collect credit card numbers outside of Shopify.

Feature / Quota Free ($0 / month) Pro ($9.99 / month) Scale ($29.99 / month)
Monthly Alert Quota 100 alerts / month 1,000 alerts / month 5,000 alerts / month
Tracked Shipments / Month 20 shipments / month 300 shipments / month 1,000 shipments / month
Layer 1: Fulfillment Delay (Unfulfilled Paid Orders) Unlimited (0 tracking quota) Unlimited (0 tracking quota) Unlimited (0 tracking quota)
Layer 2: Shipping Stagnation (3,500+ Carriers) Up to 20 shipments / mo Up to 300 shipments / mo Up to 1,000 shipments / mo
Carrier Tracking Scan Interval Every 6 hours Every 6 hours Every 6 hours
Notification Channels Unlimited channels simultaneously Unlimited channels simultaneously Unlimited channels + multi-team routing
Core Alert Engines & 1-Tap Chat Actions All 6 rules + Hold / Tag / Re-order / Ack All 6 rules + Priority Support All 6 rules + Priority Support

How Tracked Shipments & 2-Layer Delay Quotas Work

To keep pricing transparent and sustainable while giving every merchant complete delay protection, Tada Alerts separates delay detection into two layers:

  • Layer 1 — Fulfillment Delay (Unlimited & Free on All Plans): Monitors paid Shopify orders and alerts your team when an order remains unfulfilled after X hours (default: 48h). Because this uses Shopify order status webhooks and cron audits rather than external carrier APIs, it consumes 0 tracked shipment quota.
  • Layer 2 — Carrier Shipping Stagnation (20 on Free / 300 on Pro): Monitors fulfilled tracking numbers across 3,500+ global carriers and alerts you when a parcel has no checkpoint update for N days (default: 3d).
  • Smart Registration Gating: Tracking numbers are only registered for carrier tracking when your Shipping delay rule is enabled and your store is within its monthly trackedShipments allowance. Only first-time accepted tracking numbers count — duplicate registrations or unrecognized carriers rejected as invalid cost 0 quota.
  • No Mid-Transit Dropouts: If your store reaches its monthly tracked shipments cap, new tracking numbers are not registered for the remainder of the month, but all previously registered shipments continue to be tracked all the way to Delivered.

Privacy, Encryption at Rest & GDPR Compliance

Open Apps → TadaAlerts → Privacy & data at any time to inspect the exact data stored by Tada Alerts and our automated GDPR lifecycle policies.

Privacy and Data Handling Page in Tada Alerts
Figure 6.1 — The in-app Privacy & data handling page detailing encryption at rest and mandatory GDPR webhooks.

Security & Data Minimization Commitments

  • Minimal Shopify API Scopes: Tada Alerts requests only read_inventory, read_locations, read_orders, read_products, and write_orders (used strictly when you tap Hold Order or Tag Staff). We never touch your storefront theme or checkout scripts.
  • AES-256-GCM Encryption at Rest: Your Shopify access token and all connected channel credentials (Telegram chat IDs, Slack webhooks, Discord webhooks) are encrypted at rest using AES-256-GCM before being written to PostgreSQL.
  • Zero Unnecessary PII: Tada Alerts stores only order IDs, financial status, fraud risk level, and client IP address (solely for 10-minute bot/spam velocity detection). We do not store customer names, phone numbers, or credit card details.
  • Immediate Token Revocation on Uninstall: When app/uninstalled fires, your Shopify access token and channel credentials are wiped immediately, and historical alert logs are permanently purged within 30 days.
  • Mandatory GDPR Webhooks Verified: HMAC-verified handlers for customers/data_request, customers/redact, and shop/redact are active 24/7 with idempotent BullMQ queue processing.