Privacy Policy

1. Introduction

LocateUs ("we", "our", or "the App") is a Shopify application that helps merchants display their store locations on an interactive map. This Privacy Policy explains how we collect, use, store, and protect information when you use our application.

By installing and using LocateUs, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Merchant Information

When you install LocateUs, we collect:

• Shop domain (e.g., your-store.myshopify.com)
• Access tokens (encrypted, for API authentication)
• Billing plan selected

2.2 Store Location Data

You provide us with store location information including:

• Store name
• Address, city, state/province, country, postal code
• Geographic coordinates (latitude/longitude)
• Contact information (phone, email, website)
• Business hours

2.3 What We Do NOT Collect

We do not collect or store:

• Customer personal information
• Payment or financial data
• Order information
• Product data

3. How We Use Your Information

We use collected information solely to:

• Display your store locations on the interactive map widget
• Provide geocoding services (converting addresses to coordinates)
• Process billing through Shopify's billing system
• Provide customer support
• Improve the application

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage and Security

Your data is stored securely using industry-standard measures:

• Database: Vercel Postgres with encrypted connections
• Access tokens: AES-256-GCM encryption at rest
• Transmission: HTTPS/TLS encryption
• Caching: Vercel KV (Redis) for performance optimization

We maintain properly configured systems and follow security best practices to protect against unauthorized access, disclosure, or use of your information.

5. Data Sharing

We only share data with:

• Shopify: For authentication, billing, and app functionality as required by the Shopify platform
• Map providers: OpenStreetMap (open source) or Google Maps (if enabled) receive geographic coordinates to display maps
• Geocoding services: Address data is sent to geocoding APIs to convert addresses to coordinates

Your store location data is publicly displayed on your storefront's map widget as intended by the application's functionality.

6. Data Retention

We retain your data only as long as you have the app installed. When you uninstall LocateUs:

• All store locations are permanently deleted
• All settings are permanently deleted
• All access tokens are permanently deleted
• All cached data is cleared

Data deletion occurs automatically within 24 hours of uninstallation.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data (CSV export available)
• Object: Object to data processing

To exercise these rights, contact us at david.lhotte@gmail.com.

8. GDPR Compliance

We comply with GDPR requirements and respond to the following Shopify mandatory webhooks:

• customers/data_request: We provide any customer data upon request (note: we do not store customer data)
• customers/redact: We delete any customer data upon request
• shop/redact: We delete all shop data when requested

9. Cookies and Tracking

The LocateUs admin interface uses sessionStorage (not cookies) to maintain your session within the Shopify admin. We do not use tracking cookies or third-party analytics on the storefront widget.

10. Children's Privacy

LocateUs is a B2B application designed for Shopify merchants. We do not knowingly collect information from children under 16 years of age.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice in the application or sending you an email.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: david.lhotte@gmail.com

This application is built in compliance with the Shopify Partner Program Agreement and follows Shopify's data protection requirements.