Privacy Policy

This Privacy Policy describes how Zipcode Checker (“the App”), operated by Origin Apps (“we”, “us”, or “our”), collects, uses, and shares information when merchants install the App on their Shopify store and when their customers check delivery availability through the storefront widget.

Zipcode Checker lets merchants define which pincodes or zipcodes they deliver to, and lets shoppers confirm serviceability — along with delivery estimates, cash-on-delivery availability, and return/exchange windows — before placing an order. By installing or using the App, you agree to the collection and use of information as described in this policy.

When the App is installed, we access certain Shopify store data through the permissions (scopes) granted during installation, and we store the configuration merchants create in the App:

• Store information: your shop domain, store name, and the authentication tokens required for the App to communicate with Shopify on your behalf, along with the name and email address of the store staff account that installs or uses the App.
• Product information: read-only access to products, used to control where and how the storefront widget appears.
• Serviceability configuration: the pincode/zipcode lists you upload and the rules you attach to them — estimated delivery days, cash-on-delivery availability, and return/exchange windows — together with your widget settings. This configuration is stored in a metafield on your own Shopify store, not in our database.

Customer zipcode checks stay in the browser.When a shopper enters a pincode or zipcode in the storefront widget, the check runs entirely in their browser against your published serviceability list. The entered code is remembered only in the shopper’s own browser storage for convenience — it is never transmitted to, or stored on, our servers, and we collect no personal information about your customers.

We do not collect or store payment or credit card information. Payments are handled entirely by Shopify.

We use the information we collect to:

• provide the App’s core functionality — managing your serviceability lists and delivery rules, and powering the storefront widget that checks them;
• display and update your configuration in the App inside Shopify admin;
• respond to support requests and troubleshoot issues; and
• improve the reliability and performance of the App.

We do not sell, rent, or trade your data, and we do not use it for advertising or marketing to your customers.

Store and session data are stored in a secured database operated by us. Your serviceability configuration lives in a metafield on your own Shopify store. All data is transmitted over encrypted connections (HTTPS/TLS), and access to production systems is restricted to authorized personnel who need it to operate and support the App.

While we take commercially reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We only share information in the following limited circumstances:

• Service providers: with infrastructure providers (such as cloud hosting and database services) strictly as needed to run the App;
• Shopify: data flows between the App and Shopify as required for the App to function; and
• Legal requirements: when required to comply with applicable law, regulation, legal process, or enforceable governmental request.

We retain store data for as long as the App is installed on your store. When you uninstall the App, Shopify notifies us through its mandatory privacy webhooks, and we delete the store’s data within the timeframes Shopify requires:

• Customer data requests and erasure — because customer zipcode checks never reach our servers, we hold no customer personal data to produce or erase; we confirm this in response to any such request;
• Shop data erasure— after uninstallation, we delete the store’s data when Shopify issues the shop redact request, and Shopify removes the App’s metafield configuration from your store.

Merchants can also request deletion of their data at any time by contacting us directly.

Depending on where you are located, you may have rights under data protection laws such as the GDPR (European Economic Area / United Kingdom) or the CCPA (California), including the right to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of your personal information; and
• receive a copy of your data in a portable format.

To exercise any of these rights, contact us using the details below. If you are a customer of a store using Zipcode Checker, note that we hold no personal information about you — any zipcode you enter stays in your own browser.

The App uses session tokens and strictly necessary cookies solely to authenticate merchants inside Shopify admin and keep the App working securely. On the storefront, the widget stores the last checked zipcode in the shopper’s own browser storage so it can be pre-filled on their next visit; this value never leaves their device. We do not use advertising, analytics, or cross-site tracking cookies in the App.

We may update this Privacy Policy from time to time to reflect changes in the App or in applicable law. When we do, we will revise the “last updated” date at the top of this page. Significant changes will be communicated to merchants through the App or by email.

If you have questions about this Privacy Policy or how your data is handled, contact us at support@originapps.zephron.ai.