Privacy Policy: Estimatery — Delivery Date ETA

1. Overview & Application Scope

This Privacy Policy describes how Sohel Digital (“we”, “us”, or “our”) collects, uses, protects, and discloses information in connection with your access to and use of our Shopify application: Estimatery - Delivery Date ETA (also referred to within developer documentation and listings as “Estimated Shipping Date” or the “App”).

Estimatery is engineered to calculate and render dynamic estimated delivery dates, dispatch countdown timers (“Order within 2h 15m to get it by Friday”), shipping badges, order cut-off times, holiday delivery blackout dates, and carrier lead times on Shopify merchant storefronts.

We are deeply committed to merchant sovereignty and consumer privacy. Our application architecture is designed on the principle of strict data minimization: we only request access to the minimal technical data points required to calculate and display accurate shipping dates, and we never collect, monetize, or harvest personal customer data.

2. User Roles: Merchants & Shoppers

To ensure complete transparency under data protection legislation (including the EU/UK General Data Protection Regulation and the California Consumer Privacy Act), we distinguish between two categories of individuals:

3. Information We Collect

We collect information strictly necessary to provide and operate the App's features. The data points we handle are detailed below:

A. Information Collected from Merchants

• Store Identification: Shopify store domain (e.g. store-name.myshopify.com), custom primary domain, and unique Shopify Shop ID.
• Merchant Contact Information: Account owner name and administrative email address associated with the Shopify store (used exclusively for critical operational notifications, bug alerts, and support correspondence).
• Store Configuration & Shipping Preferences: Store timezone, primary currency, operational business days (e.g., Monday through Friday), warehouse handling cut-off times, holiday blackout schedules, default preparation lead time (e.g., 1–2 business days), and custom carrier transit buffers.
• App Embed Customizations: Visual styling preferences, widget positioning, typography, text strings, and translation settings configured by the merchant in the app dashboard.
• Shopify API Scopes & OAuth Tokens: Scoped, securely encrypted access tokens granted by the merchant upon installation to interact with Shopify's Partner and Admin APIs.
• Billing Data: Billing for the App is handled 100% natively through the official Shopify Billing API. We never collect, process, or store credit cards, debit cards, bank account details, or payment credentials.

B. Information Processed for Storefront Shoppers

• Delivery Destination Parameters: When a shopper inputs a postal code, state/province, or destination country into the storefront delivery estimate calculator, this input is processed in real time to calculate regional shipping transit times.
• Coarse Geolocation (IP Lookup): If the merchant enables automatic country or regional detection, the shopper's IP address is evaluated in memory at edge servers solely to determine the coarse country or region. IP addresses are not persistently logged, stored in databases, or linked to individual shopper profiles.
• Cart & Product Context: Product IDs, variant IDs, inventory levels, and collection tags needed to apply specific product-level lead times (such as pre-order dates or made-to-order manufacturing delays).

4. Purposes & Legal Bases for Processing

Under the EU/UK General Data Protection Regulation (GDPR) and similar data protection frameworks, every processing activity must rely on an established lawful basis:

5. Mandatory Shopify GDPR Webhooks

In full accordance with Shopify App Store requirements and global data privacy standards, Estimatery implements and actively responds to all three mandatory GDPR webhooks:

6. Data Retention & Deletion Lifecycle

We apply rigorous lifecycle controls to all data stored within our systems:

7. Third-Party Sub-Processors & Data Sharing

We do not sell, rent, lease, or monetize merchant or customer personal data to third parties. We engage a limited number of industry-standard, SOC-2 compliant infrastructure sub-processors to deliver high-availability cloud services:

• Shopify Inc. (Canada / USA): Provides core e-commerce platform hosting, API infrastructure, app embedding, and subscription billing services.
• Cloud Hosting & Serverless Infrastructure (AWS / Vercel): Tier-1 cloud computing platforms maintaining state-of-the-art physical and network security, data encryption, and automatic load balancing.
• Edge Geolocation & Content Delivery (Cloudflare / MaxMind): Coarse IP-to-country lookup performed at the edge without persistent logging, ensuring rapid global content delivery.

8. Cookies, Local Storage & Front-End Caching

Estimatery does not deploy advertising cookies, behavioral tracking beacons, or cross-site fingerprinting scripts.

To maximize storefront speed and comply with modern Core Web Vitals performance benchmarks, the App utilizes the visitor's browser localStorage or sessionStorage to temporarily cache computed delivery date strings (e.g., estimatery_cached_eta) and user-selected postal codes.

This caching ensures that when a shopper navigates between product pages and the cart drawer, delivery estimates display instantly without causing extra network requests or visual layout shifts. Shoppers can clear their browser storage at any time through their browser settings.

9. Security Protocols & Encryption

We treat security as a first-class engineering priority. We implement modern technical and organizational measures to safeguard all application data:

10. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction (including the European Economic Area, the United Kingdom, California, and other US states), you possess specific rights regarding your personal information:

• Right to Know / Access: You have the right to request disclosure of the personal data we process about you.
• Right to Rectification: You have the right to request correction of inaccurate personal information.
• Right to Erasure (“Right to be Forgotten”): You have the right to request deletion of your data, honored automatically through our webhook endpoints.
• Right to Restrict or Object to Processing: You may object to the processing of your information under certain circumstances.
• Right to Data Portability: You may request a machine-readable export of your configuration data.
• Right to Non-Discrimination: We will never discriminate against you, alter pricing, or deny service quality for exercising any of your privacy rights.

11. Children's Privacy

Estimatery is designed exclusively for commercial e-commerce stores and business operators. The App is not directed toward children under 16 years of age, and we do not knowingly solicit or collect personal information from minors.

12. Policy Updates & Contact Details

We reserve the right to periodically revise this Privacy Policy to reflect technical updates, legal developments, or Shopify App Store platform enhancements. Material modifications will be posted to this page with an updated revision date.