Privacy policy

1. Information we collect

When you install the App, we collect and store:

• Shop data — your Shopify store domain, access token, and plan information required to operate the App.
• Location data — store location records (name, address, coordinates, opening hours) you enter manually or import.
• Settings — your Google Maps API key, map preferences, and display settings.
• Analytics — anonymised search and location-view events from storefront visitors, including approximate IP address (used only for geolocation resolution) and an anonymous visitor identifier.

2. How we use your information

• To provide and maintain the store-locator functionality on your storefront.
• To display analytics on your Storemapify dashboard (search counts, popular locations, device breakdown).
• To process billing via Shopify’s billing API.
• To respond to support requests.

3. Data sharing

We do not sell, trade, or otherwise transfer your personally identifiable information to third parties. Your Google Maps API key is stored encrypted and used only to serve the map on your storefront. We use Shopify’s infrastructure for authentication and billing.

4. Data retention

We retain your data for as long as your shop has the App installed. If you uninstall the App, your access token is immediately revoked. All remaining shop data (locations, analytics, settings) is permanently deleted within 30 days in accordance with Shopify’s GDPR requirements.

5. GDPR & customer data rights

If you are located in the European Economic Area (EEA) you have certain data protection rights. We respond to Shopify’s mandatory GDPR webhooks:

• Customer data request — we provide a copy of any analytics data associated with a customer within 30 days.
• Customer data erasure — we anonymise all analytics data associated with a customer within 30 days.
• Shop data erasure — we permanently delete all shop data within 30 days of a deletion request.

6. Cookies & visitor tracking

The Storemapify store-locator widget stores an anonymous random identifier in the visitor’s browser (localStorage) solely to deduplicate search analytics counts. No personally identifiable information is attached to this identifier. No cross-site tracking is performed.

7. Security

All data is transmitted over HTTPS. Access to your data is restricted to authenticated requests that pass Shopify’s HMAC verification. We follow industry-standard security practices to protect your data against unauthorised access.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date above.

9. Contact us

If you have any questions about this Privacy Policy, please contact us.