ZipTip — Privacy Policy

Last updated: 2026-05-08

ZipTip is a Shopify app that helps merchants tell customers whether their postal code is within a delivery zone. This Privacy Policy explains what data ZipTip collects, how it is used, and the choices available to merchants and their customers.

1. Information collected

ZipTip collects only the data necessary to provide the service:

Shop information from Shopify: shop domain, merchant access token (encrypted at rest), installed plan tier, and Terms-of-Service acceptance timestamp.
Zone configuration: postal-code prefixes, delivery days, surcharges, cutoff times, and blackout dates that the merchant chooses to store. This data is saved in the merchant's own Shopify shop metafields, not on ZipTip's servers.
Waitlist data: when a customer enters an email and out-of-zone postal code on the storefront widget, that pair is stored alongside the merchant's shop identifier.
Webhook audit logs: ZipTip records the topic and payload of GDPR-related webhooks (customers/data_request, customers/redact, shop/redact) for compliance auditing.

2. How information is used

To authenticate the merchant's shop with Shopify.
To save and load the merchant's zone and widget settings.
To capture out-of-zone customer leads so the merchant can grow delivery coverage. Captured emails are visible only to the merchant inside the ZipTip admin.
To respond to GDPR/CCPA data requests routed through Shopify's mandatory privacy webhooks.

3. Storage and third parties

Zone and widget settings live inside the merchant's shop metafields and are removed automatically when the app is uninstalled. Authentication state and waitlist entries are stored in ZipTip's database. ZipTip uses Shopify APIs to read and write merchant data and does not share collected data with any other third party.

4. GDPR & CCPA rights

Customers and merchants may request access to or deletion of their data at any time. Shopify routes these requests through compliance webhooks that ZipTip honours within the platform-required window:

customers/data_request — a logged audit entry is created. ZipTip itself does not store customer profile data beyond the optional waitlist email; merchants can export waitlist data from the ZipTip admin.
customers/redact — any waitlist entries with the requested email are removed.
shop/redact — when a shop has been uninstalled for 48 hours, the entire shop record (auth state, waitlist entries, audit logs) is deleted.

5. Data retention

Active shops keep all data while the app is installed. After uninstall, Shopify triggers shop/redact after 48 hours and ZipTip deletes the corresponding records. Merchants may delete individual or all waitlist entries at any time from the ZipTip admin.

6. Contact

Questions about this policy or data practices: email support@iamyin.me. Takedown requests: takedown@iamyin.me.