Privacy policy

Information we use

• Store details and Shopify connection information, including the shop domain, store contact email, authentication credentials, and session information. Shopify may also provide a merchant staff member’s name, email, and account identifiers as part of authentication.
• Order references, order and fulfillment identifiers, line item identifiers, and whether an order is a test order. We check pickup, payment, and cancellation status to decide whether an order is eligible for a reminder or shipping request.
• Reminder settings and order history, including ready and due times, reminder attempts and send results, shipping requests, staff resolution, and order closure timestamps.
• Privacy request identifiers and related order references so we can handle requests privately. Messages sent to our support address are also used to respond to you.

We use Shopify to verify the store’s app subscription. App subscription billing is handled by Shopify.

Application audit logs record access and operations for security and troubleshooting, using timestamps, action types, and hashed store, order, and staff references. These audit entries do not contain customer email addresses or complete request links. Hosting log retention follows the Render workspace settings.

Reminder emails and request links

When preparing a reminder, we read the customer’s email address from Shopify and send it to Resend with the store name, order reference, reminder text, and a signed shipping request link. The customer’s email address is not stored in the app’s order database.

On verified Shopify development stores, a merchant can send a test reminder for an eligible test order to the store’s Shopify contact email. We read that address from Shopify for the test and pass it to Resend with the reminder.

The link lets its holder view the order reference and request shipping from the store. It is available for up to 14 days after a preview is created or the first email delivery attempt, whichever is later. It can become unavailable earlier when the store completes or cancels the order, or the app record is removed. The store follows up directly about shipping options and any costs.

Service providers

We use Shopify for store connections and app billing, Render for application hosting, and Resend for email delivery. These providers receive the information needed to operate their part of the service. Support messages sent to our Gmail address are processed through Gmail.

Retention and deletion

We retain open pickup orders and shipping requests so the store can continue handling them. Resolving a shipping request does not close the underlying pickup order.

During daily cleanup of the live service, order records closed more than 90 days ago are removed, except while they are needed to fulfill a pending privacy request.

When Shopify sends a verified customer deletion request, we delete the matching order records from the active app database. A verified uninstall or store deletion request removes that store’s order records, reminder settings, session information, and privacy request records from the active database.

Daily backups are kept on the application’s disk. During the daily backup process, copies outside the rolling seven-day window are removed. A deleted record can remain in an existing backup until that copy is rotated out. Shopify, email delivery records, and support correspondence have their own retention processes.

Questions and privacy requests

Customers can contact the store where they placed their order to request access to, correction of, or deletion of their information. You can also contact Belmont Supply Company at ibdeir12@gmail.com with questions about Pickup Recovery or a privacy request. We may need to verify the request with the store before responding.