Privacy Policy

1. About this policy

GCC Pin: Address Validator ("the App") is a Shopify app that helps merchants in Saudi Arabia, the United Arab Emirates, Kuwait, Qatar, Bahrain and Oman reduce failed deliveries. It checks shipping addresses at checkout, controls Cash on Delivery, and asks buyers to share an exact delivery location after they order.

This policy explains what personal data the App processes, why, where it is stored, how long it is kept and who it is shared with. It applies to merchants who install the App and to the merchants' customers ("buyers"). For buyers, the merchant is the controller of their data and the App processes it on the merchant's behalf.

2. Data we process

From merchants:

• The shop's myshopify.com domain and the access token Shopify issues to the App.
• The App's settings (address rules, messages, COD rules, hold settings) and billing information: plan, Shopify subscription ID and the number of orders processed each month. Shopify handles all payments; we never see card details.

From buyers, through the merchant's Shopify orders:

• Shipping address, name and phone number of orders shipping to a GCC country. The App reads these from Shopify to check whether the address is complete and, when the buyer adds a location, to update the order's shipping address. Names and phone numbers are not stored by the App.
• The order number, the country and the original second address line, kept so the App can update the order without losing what the buyer typed.
• The delivery location the buyer chooses to share: map coordinates (GPS or a pin they place), Saudi National Short Address, Dubai Makani number and building or flat number.

Checkout validation and the COD guard run inside Shopify as Shopify Functions. The checkout details they check are not sent to our servers.

3. How we use it

• To validate addresses and phone numbers and to show or hide Cash on Delivery, as configured by the merchant.
• To tag orders that need a location, send the buyer a private link, and optionally hold fulfillment until the location arrives.
• To write the buyer's location into the order (second address line, order note, attributes and metafields) so the merchant's courier can find the buyer.
• To bill the merchant for their plan and to operate, secure and improve the App.

We do not use buyer data for advertising, profiling or any purpose other than delivering the merchant's orders.

4. We do not sell personal data

We do not sell, rent or trade personal data, and we do not share it for cross-context behavioural advertising.

5. Where data is stored and who processes it

• Shopify: the source of all order data, and where locations are written back.
• Cloudflare: hosts the App (Cloudflare Workers) and its database (Cloudflare D1), which is encrypted at rest, plus short-lived operational logs. Data may be processed in Cloudflare data centres worldwide.
• PostHog (EU region): product analytics about how merchants use the App, such as settings saved, plan started and orders checked. Events are keyed to the shop domain and contain no buyer names, addresses, phone numbers, coordinates or links.
• Map providers: when a buyer opens the location page, their browser loads the map library (unpkg.com) and map images from OpenStreetMap, or from Google Maps or CARTO if the merchant's installation uses them. These providers receive the buyer's IP address and the map area being viewed, under their own privacy policies.

6. How long we keep data

• Buyer location requests, including any location the buyer shared, are deleted 90 days after the order is created.
• When Shopify sends a customers/redact request, we delete the stored data for the listed orders as soon as it arrives.
• When a merchant uninstalls the App, Shopify sends a shop/redact request 48 hours later, and we then delete all of that shop's data: settings, billing records, location requests and access tokens. Access tokens are already deleted at uninstall.
• Information the App wrote into the merchant's Shopify orders (such as the updated address line or order note) stays in the merchant's store under the merchant's control.

7. Security

All traffic uses HTTPS. Admin pages are authenticated with Shopify session tokens. Location links use long random tokens, stop accepting changes after 7 days or once the order ships, and show only the order number and the location details entered on that page, never the shipping address, name or phone number. Access to production systems is limited to the App's operators.

8. Your rights

Buyers can ask the merchant they ordered from to access, correct or delete their data. Merchants forward these requests through Shopify, and the App answers Shopify's data request and redaction webhooks automatically. Merchants can also contact us directly about their own data or a buyer's request.

9. Changes and contact

We will update this page when our practices change and change the date above.

Questions or requests: through the support contact on the App's Shopify App Store listing.