Privacy Policy

Estimated-Is-Jemica — Last updated: May 22, 2026

1. Who We Are

Estimated-Is-Jemica ("the App", "we", "us", or "our") is a Shopify application that displays estimated delivery dates on storefront product pages. The App is operated as a Shopify Partner application and is subject to the Shopify API Terms of Service.

2. Data We Collect and Store

When you install the App on your Shopify store, we store the following merchant-level data:

• Shop domain — used to associate your configuration with your store (e.g. yourstore.myshopify.com)
• OAuth session tokens — issued by Shopify during app installation; used to authenticate API calls to your store. These are stored securely and never shared.
• Delivery rules — the rules you create in the app (processing days, transit days, target products/collections/countries, seasonal windows, cutoff times).
• Holiday / blackout dates — the dates you add or import to exclude from delivery calculations.
• Widget appearance settings — template, colours, icon, message text, and other display preferences you configure.

We do not collect or store any data about your customers or shoppers — no names, email addresses, IP addresses, browsing behaviour, purchase history, or any other personally identifiable information (PII).

3. How We Use Your Data

The data listed above is used exclusively to operate the App:

• Authenticate requests from your Shopify admin and storefront.
• Calculate and return estimated delivery dates when a shopper visits a product page.
• Display the widget with your chosen appearance settings.

We do not use your data for advertising, analytics sold to third parties, or any purpose beyond operating the App.

4. Data Sharing and Third Parties

We do not sell, rent, or share your data with third parties. The App relies on the following infrastructure providers, each with their own privacy policies:

• Shopify — the platform through which the App is installed and authenticated (Shopify Privacy Policy).
• Railway / hosting provider — the servers where the App runs and your configuration data is stored.
• PlanetScale / MySQL database — the database used to store your configuration data.

These providers are used solely to operate the App and are contractually bound to protect your data.

5. Data Retention

Your data is retained for as long as the App is installed on your store. If you uninstall the App, Shopify sends us a shop/redact webhook 48 hours after uninstallation. Upon receiving this webhook, we permanently delete all data associated with your shop, including all delivery rules, holiday dates, widget settings, and session tokens.

6. Security

All communication between your store and the App is encrypted via HTTPS. App Proxy requests from the Shopify storefront are verified using HMAC signature validation. OAuth tokens are stored encrypted at rest.

7. GDPR and Shopify Mandatory Webhooks

The App complies with Shopify's mandatory GDPR webhook requirements:

• customers/data_request — because we store no customer PII, there is no customer data to provide in response to a data access request.
• customers/redact — because we store no customer PII, there is no customer data to delete.
• shop/redact — all shop-level data (rules, holidays, settings, sessions) is permanently deleted within 48 hours of app uninstallation.

If you are a merchant subject to GDPR and have questions about how we handle your data, please contact us at the address below.

8. Your Rights

As a merchant using the App, you have the right to:

• Access the data we hold about your store (your delivery rules, holiday dates, and widget settings are visible and editable directly in the app).
• Delete your data at any time by uninstalling the App.
• Contact us with any questions or requests regarding your data.

9. Children's Privacy

The App is a business tool intended for Shopify merchants. It is not directed at or designed for use by individuals under the age of 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

• Email: info@jemi.ca