Privacy Policy
Effective date: March 9, 2026
ShipPulse ("we", "us", "our") is a Shopify app that provides AI-powered delivery date estimates and a free shipping progress bar for Shopify merchants. This privacy policy explains what data we collect, why we collect it, how we store it, and what rights you have.
1. Data We Collect
From merchants (store owners who install ShipPulse):
- Store domain and email address (provided by Shopify during app installation)
- Fulfillment origin ZIP code and timezone (configured during onboarding)
- App settings such as carrier preferences, holiday calendar, and free shipping thresholds
From fulfillment data (via Shopify Admin API and webhooks):
- Destination ZIP code and country code from shipping addresses
- Carrier name and tracking number
- Fulfillment and delivery timestamps
- Shopify order and fulfillment identifiers
Data we do NOT collect:
- Customer names, email addresses, or phone numbers
- Full street addresses, city, or state
- Payment or billing information for customers
- Browsing behavior or analytics about store visitors
2. How We Use This Data
We use the data described above exclusively to:
- Calculate delivery date estimates — destination ZIP codes and country codes are used to determine shipping zones and compute transit time predictions.
- Improve estimate accuracy over time — fulfillment and delivery timestamps are used to build moving averages of real transit times per carrier, service level, and zone.
- Send merchant notifications — store email addresses are used to send trial expiration, order limit, and welcome emails to the merchant (not to their customers).
3. Data We Do NOT Sell or Share
We do not sell, rent, or share any merchant or customer data with third parties. ShipPulse is a closed-loop system: data flows from Shopify to ShipPulse and back to the merchant's storefront as delivery estimates. No data is shared with advertisers, data brokers, or any external services.
4. Third-Party Services
- Shopify — we access fulfillment data through the Shopify Admin API under scopes authorized by the merchant.
- Sentry — we use Sentry for error monitoring. PII transmission is disabled (
send_default_pii = false). - SendGrid — we use SendGrid to send transactional emails to merchants only (not to their customers).
- MaxMind GeoLite2 — we use a local copy of the MaxMind GeoLite2 database for IP-based geolocation. No data is sent to MaxMind.
5. Data Retention
Shipment records (destination ZIP, carrier, tracking, transit times) are automatically deleted after 90 days. This matches the learning window used by our AI delivery estimation engine. Merchant account settings are retained for the duration of the app installation.
6. Data Security
- In transit: All data is transmitted over HTTPS/TLS. SSL is enforced in production.
- At rest: Data is stored in a managed PostgreSQL database with encryption at rest provided by the hosting provider.
- Access controls: API access tokens are stored securely and scoped to the minimum permissions required.
- Logging: Sensitive parameters (passwords, tokens, secrets) are filtered from application logs.
7. GDPR and Data Subject Rights
ShipPulse complies with Shopify's mandatory GDPR webhooks:
- Customer data request: When Shopify sends a customer data request, we identify and return any shipment records associated with the customer's orders.
- Customer redaction: When Shopify sends a customer redaction request, we delete all shipment records associated with the customer's orders.
- Shop redaction: When a merchant's store is deleted, we delete all data associated with that store, including shipment records, settings, and account information.
8. Merchant Rights
Merchants can:
- Uninstall ShipPulse at any time from their Shopify admin. Uninstalling marks the account as inactive and expires session tokens.
- Request a full export of their data by contacting us.
- Request deletion of their data by contacting us or by requesting Shopify to redact their store data.
9. Children's Privacy
ShipPulse does not knowingly collect personal information from children under 13. Our service is intended for Shopify merchants operating businesses.
10. Changes to This Policy
We may update this privacy policy from time to time. If we make material changes, we will notify merchants via email or through the app. The effective date at the top of this page indicates when the policy was last revised.
11. Contact Us
If you have questions about this privacy policy or your data, contact us at: