Privacy Policy – Delivery App

Effective date: [2025-10-09]

App: Delivery App (“the App”)
Provider: [Your Company Legal Name] (“we”, “us”, “our”)
Website: https://delivery-app.siwon.ca
Contact: [chris.vuong@siwon.com] • [Your Legal Postal Address]

1) What this policy covers

This policy explains what data the App processes when installed on a Shopify store, how we use and share it, and the choices merchants have. By installing or using the App, you agree to this policy.

2) Data we access from your Shopify store

When the App is installed, we receive an OAuth access token from Shopify and, according to the scopes you approve, may read:

Store & app data: shop domain, app installation status, app scopes.
Products: titles, variants, SKUs, tags (read).
Orders: order IDs, line items, fulfillment & payment status, tags, shipping details (read).
Customers: names, emails, phone, addresses, tags (read).
Shipping: addresses and shipping method info (read).

We do not request or store customer passwords or full payment card numbers.

3) How we use your data

Operate the App: render dashboards, routes, drivers, and order views.
Geocoding & maps: convert addresses to coordinates and display maps (via Mapbox).
Support & troubleshooting: investigate errors you report.
Security & abuse prevention.

We do not sell your data.

4) Data sources and sharing

From Shopify: via Shopify APIs under the scopes you approved.
Processors: We use service providers to operate the App:
- Mapbox (maps/geocoding; receives address data you send for geocoding).
- Hosting/Infrastructure (server, database, logging, and monitoring).
These providers process data on our behalf under contracts and appropriate safeguards. We may disclose data if required by law or to protect rights/safety.

5) Webhooks & compliance requests

We subscribe to Shopify’s mandatory compliance webhooks and act on them:

customers/data_request – we provide customer data we hold to the merchant.
customers/redact – we delete customer data we hold when instructed.
shop/redact – upon app uninstallation or instruction, we delete store-related data after the retention period.

6) Data retention

We retain store and customer data only as long as needed to provide the App or as required by law. Typical examples:

Operational data (routes, drivers, order views): retained while the app remains installed and used.
Logs/metrics: short-term retention for reliability and security.
Upon uninstallation: we queue deletion of store data within [60 days], except where longer retention is required by law or to resolve support issues you request.

7) Security

We implement administrative, technical, and physical safeguards appropriate to the data we process (e.g., encryption in transit, access controls, least-privilege credentials, webhook HMAC verification). No method is 100% secure, but we work to protect your data.

8) International transfers

Data may be processed in the country where you are located and in other countries where our providers operate. When transferring data internationally, we use appropriate safeguards (e.g., processor contracts, standard contractual clauses where applicable).

9) Your rights

Depending on your location, you may have rights to access, correct, delete, or port personal data. For customer data in your Shopify store, please submit requests through Shopify; we act on Shopify compliance webhooks from the store owner. For data we control directly (e.g., your account or support communications), contact us at [chris.vuong@siwon.com].

10) Children’s privacy

The App is not intended for use by children. We do not knowingly process personal data of children.

11) Changes to this policy

We may update this policy to reflect operational, legal, or regulatory changes. We will post the updated policy with a new Effective date. Your continued use of the App after changes constitutes acceptance.

12) Contact us

Questions or requests can be sent to:
Email: [chris.vuong@siwon.com]
Address: [1111 Melvile Street]