One Stop Store Locator & Maps Privacy Policy

When you install the App, Shopify gives us:

• your store's domain and an access token the App uses to work on your store;
• your store's billing country, which the App reads to set the default country and distance unit.

While you use the App, we store what you enter:

• your locations: names, addresses, map pins, phone numbers, business email addresses, websites, opening hours, tags, descriptions, images, custom fields and social links;
• your settings for the locator, its look and its texts.

Settings, location pages and uploaded images are stored in your Shopify store. Everything else is stored in our database. We do not store your name or personal email address. If you contact support, we keep the messages you send us.

Searches

When a customer searches the store locator, the App records:

• what they searched for (a city, postal code or address they typed);
• the point that search resolved to, or, if they use the locate button, the position their browser reports;
• the time, the filters they used, how many of your locations were in range and how far the nearest one was.

The App uses this to show you where customers search and where you have no store nearby. A search record does not contain a name, email address, IP address or any account identifier.

Requests to be told about a new store

If you turn on lead capture and a customer finds no store nearby, they can leave their email address. The App then stores that email address with what they searched for and where, and shows it to you under Leads. Nothing is stored unless the customer submits the form.

What the App does not do

• The store locator sets no cookies and uses no local storage in the customer's browser.
• The App does not store customers' IP addresses and does not track customers across pages or stores.
• The App does not read your Shopify customers, orders or checkouts.

We use these service providers. Each receives only what it needs:

• Shopify: the platform the App runs on. Settings, location pages and images are stored in your store.
• Fly.io (United States): hosts the App's servers.
• Supabase (database hosted on Amazon Web Services, United States): stores the data described above.
• Mapbox (United States): turns the addresses you enter, and searches the App cannot resolve on its own, into map points. Mapbox receives the search text, not who typed it.
• OpenFreeMap and jsDelivr: the customer's browser loads map images and the map library from them, so they receive the customer's IP address as part of that request. With the privacy mode setting turned on, the map only loads after the customer chooses to load it.
• Google Maps: only if a customer clicks Directions, which opens Google Maps with your store's address.

We do not sell or rent personal data and do not share it for advertising. We disclose data if the law requires it or to protect our rights or the rights of others.

We keep the data while the App is installed on your store.

• When you uninstall the App, Shopify asks us to erase your store's data, and we delete your locations, searches and leads from our database. Shopify removes the App's settings with the App. Location pages and uploaded images live in your Shopify store, where you can delete them.
• When a customer asks your store to erase their data, Shopify tells us and we delete the leads stored for their email address.
• You can ask us at any time to delete your data earlier.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to complain to a data protection authority. This includes rights under the EU and UK GDPR and US state laws such as the CCPA. To use them, email [email protected].

Data is processed in the United States. Where the law requires it, transfers rely on our providers' standard contractual clauses or an equivalent safeguard.