> For the complete documentation index, see [llms.txt](https://appsetup-eng.gitbook.io/pickup-points/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://appsetup-eng.gitbook.io/pickup-points/privacy-policy.md). # Privacy Policy Last Updated: 17.09.2026 This Privacy Policy explains how Appsetup Eng. (“we”, “us”, “our”) collects, uses, protects, and shares data for **Pickup Points & Lockers by Appsetup** (the “App”). By installing or using the App, you (“Merchant”, “User”, “you”) consent to the practices described here. If you do not agree, do not install or use the App. ### Data Collected Merchant/Store Data: Shop ID, shop domain, app installation status, app settings, enabled couriers, country settings, shipping-zone mappings, Shopify shipping-rate mappings, feature states, plan status, usage limits, and operational settings needed to run the App. Customer Contact Data: Email address, first name, last name, and phone number when the customer enters these details in the pre-checkout pickup form or when Shopify makes them available for the delivery flow. Customer Delivery Data: Delivery country, city, address, postal code, selected delivery type, selected courier, selected pickup office, pickup point, parcel shop, locker, or address-delivery details. Cart, Checkout, And Order Data: Cart context, checkout context, order references, selected courier/location data, and related attributes or metadata needed to pass the selected delivery option into Shopify checkout, support order handling, and count usage for billing limits. Courier Location Data: Cached pickup-point data used by the App, such as provider code, external location ID, location name, address, city, postal code, coordinates, location type, active status, and source metadata. This data may come from public, authorized, merchant-provided, or credentialed provider sources. Technical/Operational Signals: Non-personal diagnostics, request timing, sync status, sync errors, endpoint errors, rate-limit events, and basic logs used to maintain reliability, security, and performance. Optional Integration Data: If optional courier APIs, provider feeds, or integrations are enabled, any keys, tokens, file paths, or configuration values you provide are used only for the features you activate. **Data Minimization:** We process only the personal data reasonably necessary to provide, secure, maintain, and support the App and the features activated by the Merchant. We do not intentionally collect protected customer data that is not required for these purposes. ### Storage & Protection App Database Storage: The App stores configuration, courier mappings, cached pickup locations, pickup selections, usage counters, and operational records in the App database or Shopify resources as required for functionality. Shopify Storage: Some selected delivery details may be saved into Shopify cart attributes, checkout fields, order data, metafields, or other Shopify resources where Shopify allows it. Location Data Protection: Storefront JavaScript and CSS are public by design. The App protects location data through backend controls, including Shopify-signed proxy requests, cart-scoped location tokens, country/courier/type checks, capped responses, single-point detail requests, rate limits, and server-side syncs. Limited Storefront Exposure: The storefront does not receive the full pickup-location database at once. Map and list requests return limited data needed for customer selection. Full details for a pickup point are returned only when a customer selects that specific location. Security Measures: We apply reasonable technical and organizational safeguards designed to protect App data. No method of transmission or storage is 100% secure. You control Shopify user access, staff permissions, app permissions, and any provider credentials you add. **Encryption:** Personal data transmitted between supported systems is protected in transit using encrypted HTTPS/TLS connections. Protected customer data stored by the App is protected using encryption at rest where applicable to the storage service or infrastructure used by the App. **Encrypted Backups:** Backups that contain protected customer data are stored using encrypted backup/storage systems and are subject to access controls appropriate to the sensitivity of the data. **Production And Test Separation:** Production and development/test environments are maintained separately. Production customer personal data is not intentionally used as test or development data. Development and testing systems use separate environments, credentials, databases, or test data where applicable. **Data Loss Prevention:** We maintain technical and organizational measures designed to reduce unauthorized disclosure, extraction, copying, or loss of protected customer data. These measures include restricting access, limiting unnecessary collection and exports, protecting credentials and secrets, separating environments, monitoring operational activity, and applying appropriate security controls to systems that process protected customer data. **Access Control:** Access to protected customer data is restricted to authorized personnel who require access to operate, maintain, secure, troubleshoot, or support the App. Access permissions are limited according to operational need. **Authentication And Password Security:** Administrative and staff accounts used to access systems containing protected customer data are required to use strong authentication credentials. Strong, unique passwords and additional authentication protections such as multi-factor authentication are used where supported. **Access Logging:** We maintain appropriate operational and security logs for access to systems or functionality involving protected customer data. Access logs may include information such as the time of access, the system or authorized account involved, the type of action performed, and relevant resource identifiers. We seek to avoid recording unnecessary personal data in security logs. **Security Incident Response:** We maintain a security incident response process for suspected or confirmed unauthorized access, disclosure, loss, or misuse of protected customer data. Our response process includes identifying and containing the incident, restricting or rotating affected credentials where necessary, preserving relevant evidence and logs, determining affected systems or data, correcting the underlying issue, documenting the incident, and providing notifications where required by applicable law, Shopify requirements, or contractual obligations. Retention: App configuration and operational data remain while the App is installed and needed to provide the service. Cached courier locations may remain until replaced, resynced, disabled, or removed. Customer-related pickup selections may remain in Shopify order records according to Shopify and merchant retention settings. **Retention And Deletion Controls:** We maintain retention practices intended to ensure that personal data is not retained longer than necessary for the purposes for which it is processed, except where longer retention is required by applicable law or necessary to establish, exercise, or defend legal claims. Data that is no longer required may be deleted, anonymized, or otherwise removed from active App systems according to our retention procedures. **Shopify Privacy Requests:** We process applicable Shopify privacy and compliance requests, including customer data access requests, customer redaction requests, and shop redaction requests. Where Shopify sends a valid deletion or data-access request, we process the request in accordance with Shopify requirements and applicable legal obligations. ### Use Of Data Core Functionality: Show the pre-checkout pickup form, display available courier offices and lockers, allow location search and selection, pass selected delivery information into Shopify checkout, and connect customer selections to the correct Shopify shipping rates. Courier Configuration: Enable merchants to configure couriers by country, delivery type, and Shopify shipping-rate mapping. Checkout And Order Handling: Save or pass selected courier, location, address, city, postal code, phone, and contact information where Shopify allows it and where the data is available. Billing And Usage Limits: Count eligible orders or usage events needed to apply plan limits, billing-period limits, and upgrade prompts. Administration: Power admin pages, sync dashboards, courier settings, pickup form settings, search, pagination, status indicators, and support tools. Security And Abuse Prevention: Detect endpoint misuse, rate-limit suspicious requests, protect location endpoints, and prevent unauthorized bulk extraction of courier location data. Analytics/Improvement: Use aggregate, non-personal insights such as feature usage, error patterns, and sync performance to improve reliability and support. We do not sell customer data. **Purpose Limitation:** Personal data is used only for the purposes described in this Policy, to provide functionality requested by the Merchant, to secure and maintain the App, to comply with legal or Shopify requirements, or for another compatible purpose permitted by applicable law. **Customer Consent And Privacy Choices:** Where Shopify provides applicable customer consent, privacy, or data-processing choices to the App, we respect and apply those choices where they are relevant to the App's processing activities. **Automated Decision-Making:** The App is not designed to use protected customer data to make automated decisions that produce legal effects or similarly significant effects on customers. The App uses customer and delivery information to provide merchant-configured shipping, courier, pickup-point, locker, and related order functionality. ### Sharing Shopify: The App operates through Shopify APIs, Shopify app proxy, Shopify checkout, and Shopify admin. Your use is governed by Shopify’s terms and policies. Courier Providers And Third-Party Services: The App may interact with courier APIs, location feeds, map services, hosting providers, databases, or other third-party services needed for functionality. Their privacy practices are not covered by this Policy. Merchant Fulfillment: The merchant may use selected customer delivery and pickup-location data to fulfill orders, communicate with couriers, and provide delivery support. Legal: We may disclose information if required by law, valid legal process, Shopify requirement, provider complaint, or security investigation. We limit such disclosures to what is necessary. No Sale: We do not sell or rent customer data. **Customer Sale Opt-Out Rights:** Because we do not sell or rent customer personal data, the App does not use protected customer data for the sale of personal information. Where an applicable privacy request or Shopify-provided privacy signal is relevant to our processing, we process it in accordance with applicable requirements. #### Your Rights **Control:** You manage app settings, couriers, shipping-rate mappings, pickup form settings, provider credentials, and enabled delivery methods within Shopify admin and the App. **Access/Correction/Deletion:** You may update or delete app configuration where the App provides controls. Customer order data stored in Shopify is managed according to Shopify’s tools and merchant retention settings. **Uninstall:** If you uninstall the App, Shopify sends required uninstall/privacy events. The App will process shop erasure according to Shopify app requirements and operational retention needs. **GDPR/International:** You are the controller for your customers’ data and must maintain a lawful basis, honor data-subject rights, and comply with applicable privacy, consumer, e-commerce, and delivery laws. Appsetup acts as a service provider or processor where applicable, depending on the merchant’s use of the App and applicable law. #### Courier Location Data The App may cache courier pickup-point data from public, authorized, merchant-provided, or credentialed sources. You are responsible for confirming that your use of courier data, APIs, files, widgets, or feeds complies with provider terms and applicable laws. The App is not intended to be used as a source for extracting, copying, exporting, reselling, redistributing, or building a separate courier-location database. We may disable, remove, restrict, or modify any courier data source if required by a provider, Shopify, law, security concern, abuse risk, or operational risk. #### Third-Party Services The App may reference or interact with third-party services, including Shopify, courier providers, map providers, hosting providers, database providers, and API services. Their privacy practices are not covered by this Policy. Review their policies before sharing personal information or enabling integrations. #### Risk Disclaimers **No Delivery Guarantee:** The App does not ship orders, guarantee courier acceptance, guarantee pickup-point availability, or guarantee successful delivery. **Data Accuracy:** Courier location data may be incomplete, outdated, unavailable, duplicated, missing coordinates, or missing postal codes depending on the provider source. **Checkout Limitations:** Shopify controls checkout behavior and may not accept or preserve every field in every situation. Some delivery information can be passed only where Shopify allows it and where the data exists. **Configuration Responsibility:** You are responsible for the accuracy of couriers, shipping zones, shipping rates, delivery methods, provider settings, customer-facing labels, and checkout testing before going live. #### Policy Updates We may update this Policy at any time. Significant changes will be posted in the App, documentation, or on our website. Continued use after updates constitutes acceptance of the revised Policy. #### Contact For privacy questions or requests, contact: