Privacy policy
Last updated: 11 October 2026
ZoneSync provides delivery-area checks, delivery and pickup scheduling, storefront widgets and order-service records for Shopify merchants. For privacy questions or requests, contact operationssuitesupport@gmail.com. ZoneSync is the service name; we do not represent it as a registered company.
Information we use
- Store domain, Shopify installation credentials, staff identifiers and app settings to operate the merchant workspace.
- Merchant-entered delivery locations, zones, countries, postcodes, suburbs, schedules and booking limits.
- Selected delivery or pickup dates and times, relevant order identifiers and Shopify order delivery state/country for validation, capacity, reporting and plan allowances. We do not need buyer names, payment details, phone numbers or email addresses for these delivery features.
- Support contact email, message and optional files when you submit a support request.
- App activity and technical service logs for security, troubleshooting and reliable operation.
Purposes and sharing
We use data to provide the requested app functions, apply subscription limits, respond to support and meet Shopify privacy obligations. We do not sell this information or use it for advertising. Shopify supplies authentication, checkout, subscriptions and order APIs. Cloudflare hosts the app and its database. Resend sends support messages and acknowledgements; support messages and files are delivered to our Gmail support inbox operated through Google. These providers may process data in other countries under their service terms. Merchants should disclose ZoneSync where appropriate in their own customer privacy information.
Retention
Store settings and directories remain while installed. On uninstall we remove app access credentials and sessions promptly. Store data is deleted when Shopify requests shop redaction, with a seven-day uninstall cleanup fallback. Activity history is retained up to 365 days. App support records are retained up to 90 days; the support mailbox is managed separately and deletion requests are handled by support. Pickup bookings and monthly usage records are retained up to 90 days. Temporary sessions and previews expire automatically. Privacy exports and processing tasks are retained up to 30 days. Shopify retains its own order and billing records under its policies. Trial eligibility is checked against Shopify subscription history; local trial history is removed with store redaction. Provider recovery copies and service logs follow the providers’ retention settings and may expire separately from the live database.
Your choices and privacy requests
Merchants can edit or export their configured directory and schedules, disable widgets or services and uninstall the app. Customers should contact the merchant responsible for their order to request access or deletion. ZoneSync receives Shopify’s authenticated data-request and redaction webhooks. Relevant app records are exported for the merchant to securely provide after verifying identity; matching app records are deleted on redaction. For messages or files in our support inbox and email-provider records, contact our privacy email so we can process the request with the relevant provider. We may need information to verify your request.
Merchant privacy and data-processing commitments
Version 2026-10-11. These commitments form part of ZoneSync’s service terms. ZoneSync is a service name, not a representation that a registered company exists. Our privacy contact is operationssuitesupport@gmail.com.
Your instructions and our responsibilities
You decide why your customers’ information is used and are responsible for a lawful basis and customer notices. We process customer information on your behalf only to operate your configured delivery and pickup checks, checkout validation, order service records and booking limits. Your configuration and authorised use are your documented instructions. We will inform you if an instruction appears unlawful and suspend that affected processing while it is resolved. We do not sell customer data, use it for advertising, or combine it across stores for our own marketing.
Scope and duration
The information concerns customers and visitors using the service: order identifiers, delivery country, region, postal code and city, selected delivery or pickup date/time, and related booking and activity records. Buyer names, payment details, buyer email and phone are not needed for these delivery features. Support submissions are separate; avoid including unnecessary customer information or sensitive files. Processing lasts while the service is provided and during the retention periods above.
Security, confidentiality and assistance
Access is limited to authorised people with a service need. We use store-scoped authorisation, encrypted hosted storage and transport, restricted credentials, access logs and an incident-response procedure. We will assist with verified access/deletion requests and reasonable security information. If we become aware of a customer-data breach, we will notify the affected merchant without undue delay, provide available information and cooperate with containment and required responses. We will not disclose another store’s information or security credentials.
Providers and international processing
You authorise the providers described above for their stated functions: Cloudflare for hosting and storage, Resend for support email delivery and Google for the support mailbox. Shopify supplies store/order APIs, authentication and billing. Data may be processed internationally. Resend’s published terms incorporate its data-processing addendum and transfer clauses; Cloudflare publishes its customer data-processing addendum. These documents do not mean that every transfer or every mailbox account is automatically covered by a signed agreement. Where applicable law requires additional safeguards, they must be established before the affected processing; contact us to arrange them. We will notify merchants before adding or replacing a provider that handles their customer data and provide an opportunity to raise a privacy concern.
End of service and requests
You may export configured data, request assistance returning applicable customer records and uninstall the app. Access is revoked on uninstall; shop redaction and the seven-day cleanup fallback remove app-held shop records. The retention periods above also apply. Provider recovery copies and mailbox records require the provider-specific deletion process; contact our privacy email. Any legally required hold is restricted to the relevant records and does not permit unrelated use.
Acceptance and changes
An authorised Shopify merchant representative can accept this policy and these processing commitments in the app. We record the store, document version and fingerprint, acceptance time and authenticated representative identifier. Acceptance is not backdated. Records follow the app’s 365-day activity retention and shop-redaction cleanup. Updated commitments require acceptance of their new version. These commitments do not replace mandatory legal requirements or customer consent where required.
Security and updates
We use HTTPS, encrypted installation credentials and privacy exports, store-scoped authenticated access and signed Shopify webhooks. No system can guarantee absolute security. Material changes will be reflected in this policy and its update date.