Address Ninja Privacy Policy
Address Ninja ("the Application") offers a platform to set custom rules for the checkout for Shopify ("the Service"). This Privacy Policy outlines how we gather, use, and disclose personal data when you utilize the Application in association with your Shopify-operated store.
Data Collection
Upon installing the Application, we gain access to specific data from your Shopify account, including:
- Store details (to identify the installer)
- Your Store’s Metafields and Metaobjects to read and store product/bundle data
We collect this information directly from you, via your Shopify account, or through technologies such as:
- Cookies: Small files stored on your device, often containing a unique but anonymous identifier.
- Log Files: These monitor site activity and capture data like IP addresses, browser information, ISP details, and timestamps.
- Web Beacons, Tags, and Pixels: Digital elements used to collect data on site navigation patterns.
Address Verification (Pro Plans)
When a merchant turns on address verification, the shipping address a customer enters at checkout is sent to our verification service and to Google LLC (Google Maps Platform Address Validation API) to check whether it can be delivered to. We keep the entered address, the suggested correction, and the customer reference for 30 days. When the customer accepts a suggested correction, we update the order's shipping address in Shopify, and we tag orders whose address was flagged, fixed, or kept. We keep the operational record of the check (the order reference, the result, the verification unit used for billing, and a salted one-way hash derived from the order and the address that serves as the billing key) for 13 months, for billing and support. We do not send or keep the customer's name, email address, or phone number for this feature. Merchants can turn address verification off at any time. With it off, no customer's address leaves Shopify; a merchant can still test the feature with an address they type in, which is sent to Google the same way.
Data Utilization
The personal information gathered is primarily used to deliver the Service and facilitate the Application's functions. Additionally, we use this data to:
- Engage in communications with you
- Enhance and refine the Application
- Check whether a shipping address can be delivered to, when a merchant turns on address verification
- Distribute targeted advertisements or promotional content relevant to our offerings
Data Sharing
Your personal data may be disclosed to fulfill legal obligations, comply with lawful requests, or safeguard our rights and assets.
For address verification, we use these sub-processors: Google LLC (Google Maps Platform Address Validation API, United States), which receives only the address being checked (the shipping address of an order from merchants who have turned the feature on, or an address a merchant enters to test the feature) and never a name, email address, or phone number; Railway Corporation (United States), which hosts our verification service and its database; and Cloudflare, Inc. (United States), which carries the requests between the checkout and our verification service.
Targeted Advertising
We employ your personal data to offer ads or marketing messages that we believe will be beneficial for you. To learn more about targeted advertising, consult the Network Advertising Initiative's educational resources.
User Rights (For European Residents)
If you are based in Europe, you have the right to request access to, rectification of, or deletion of your personal data. To exercise these rights, please reach out to us using the contact details provided at the end of this policy.
Your data may be processed outside Europe, including in the United States and Canada.
Data Retention Policy
We will hold onto your data for as long as needed unless you request its deletion. Address verification data has its own periods, set out above: 30 days for the entered address, the suggested correction, and the customer reference; 13 months for the operational record. A customer data erasure request removes the customer's address, the suggested correction, and the customer reference from address verification records; the operational record of the check, including its salted billing key, stays for billing. All of a store's data is deleted 48 hours after the app is uninstalled.
Policy Updates
This Privacy Policy may be updated periodically to accommodate changes in our practices or for other operational, legal, or regulatory reasons.
Contact Information
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at support@magicalapps.com or by mail using the details provided below:
Magical Apps 34 Minowan Miikan Lane Toronto, Ontario, Canada M6J 0G3