APPSETUP LEGAL

Privacy Policy

Effective and last updated: October 7, 2026

This Privacy Policy explains how Appsetup Eng. ("Appsetup", "we", "us", or "our") collects, uses, stores, and shares information when merchants use the Appsetup website, dashboard, Shopify applications, Digital Receipts, support services, and connected integrations (collectively, the "Services").

The Services include Pickup Points & Lockers, Cash on Delivery Blacklist, Email Popups & Spin Wheel, Infinite Blog Post, the Appsetup Dashboard, and related receipt, audit, delivery, and support features.

1. Roles and scope

The merchant normally controls its customers' personal data, and Appsetup processes that data as a service provider or processor to provide the features selected by the merchant. Appsetup may act as a controller for account, security, billing, and direct support information where applicable.

2. Information we process

Merchant and store data: store domain and ID, installation and plan status, settings, enabled features, staff or account identifiers, and support communications.
Customer and order data: names, email addresses, phone numbers, delivery addresses, order references, payment or delivery status, selected couriers and pickup locations, and information needed to create or deliver merchant-requested documents.
Feature data: blacklist entries, popup submissions, reward and campaign settings, article configuration, courier configuration, usage counters, digital receipt snapshots, audit documents, and delivery records.
Technical data: request metadata, security events, errors, timestamps, device or browser information, and limited operational logs.
Integration data: provider identifiers, configuration, access tokens, refresh tokens, API credentials, granted scopes, and connection status for integrations the merchant activates.

3. Google user data and Gmail access

Limited Google permission: Digital Receipts requests https://www.googleapis.com/auth/gmail.send so a merchant can send digital receipts and audit documents from the Google mailbox the merchant explicitly connects. Appsetup does not request permission to read, list, search, modify, or delete Gmail messages.

When a merchant connects Google, we receive and process:

The connected Google account's email address, display name, and basic OpenID profile information.
The OAuth scopes granted by the user.
OAuth access and refresh tokens needed to send authorized messages and maintain the connection.
Google API responses required to confirm delivery or diagnose a failed send.

Google user data is used only to identify the mailbox selected by the merchant; send merchant-authorized digital receipts, test messages, and audit documents; refresh authorization and maintain or troubleshoot the requested connection; protect the integration against abuse; and comply with applicable legal obligations.

We do not use Google user data for advertising, profiling, credit decisions, or training generalized artificial-intelligence or machine-learning models. We do not sell Google user data or transfer it to data brokers or unrelated third parties.

We disclose Google user data only to infrastructure providers acting on our behalf where necessary to operate and secure the Services; when the user gives explicit consent; when necessary for security or abuse investigation; or when required by applicable law. Human access is limited to cases where the user consents, it is necessary for security or support, or it is legally required.

Appsetup's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. Microsoft mailbox data

If a merchant connects Microsoft, the Services request delegated identity, offline-access, and mail-sending permissions. We use them only to identify the selected mailbox, maintain the connection, and send merchant-authorized receipts and audit documents. We do not use the connection to read the user's mailbox.

App-specific processing

Pickup Points & Lockers

The app processes the merchant's courier configuration and credentials, customer contact and delivery-address details, cart or order references, and the courier and pickup location selected at checkout. It may temporarily cache location identifiers, names, addresses, coordinates, hours, and other operational fields received from courier, map, public, merchant-supplied, or authorized provider endpoints.

We use this information only to display delivery choices, validate a selection, attach it to the checkout or order, support fulfillment, and diagnose the integration. Location datasets and courier marks remain the property of their providers. We do not sell or redistribute them, and public technical accessibility does not by itself grant a licence. A source may be limited, replaced, or disabled when its terms, accuracy, availability, or authorization are uncertain.

Cash on Delivery Blacklist

The merchant's raw blocked and allowed email addresses, phone numbers, domains, notes, associations, rules, and settings are primarily stored in Shopify app-owned metafields. To provide recovery, the app may also store compressed backup snapshots in Appsetup infrastructure. Ordinary snapshots are intended to expire after 30 days; a final uninstall snapshot may be retained until the merchant requests erasure or it is no longer reasonably required for recovery, disputes, security, or legal obligations.

If shared fraud signals are enabled, normalized email addresses and phone numbers are converted to keyed HMAC-SHA-256 values before being placed in the shared database. These values are pseudonymous, not anonymous, and Appsetup does not describe them as encryption. Shared records may include the reporting shop, country, optional order reference, reason or note, counts, and timestamps. Another participating merchant can receive a match or risk signal, not the reporting merchant's raw customer identifier. Reports may be corrected, allowlisted, challenged, or removed where appropriate.

The app can use these signals and merchant-defined thresholds to recommend or automatically apply checkout restrictions. The merchant determines the configuration, lawful basis, customer notice, review and appeal process, and final action. API credentials for optional reputation providers are stored in Shopify app-owned configuration and transmitted only to operate the enabled integration.

Infinite Blog Post

The app stores article-display settings and blocked article relationships in Shopify metafields. When analytics are enabled, it may record blog and article identifiers or handles, page and session identifiers, referrer and UTM campaign fields, locale, time zone, browser or user-agent and inferred device category, event timestamps, page-load events, and reading or engagement time. Article titles may be obtained from Shopify to present reports. Analytics are used for merchant reporting and product operation, not to identify visitors across unrelated merchants.

Email Popups & Spin Wheel

Depending on merchant configuration, the app processes campaign and popup settings, submitted email addresses and optional form fields, consent or interaction records, reward and discount assignment, email verification or one-time-code status, timestamps, and limited technical delivery events. When the merchant enables an integration, selected subscriber and campaign data may be sent to Shopify, Klaviyo, or the selected email/marketing provider. The merchant is responsible for lawful consent, required disclosures, suppression and unsubscribe handling, and its provider configuration.

Digital Receipts

The service processes Shopify order and customer-email information needed to generate and deliver the merchant's receipt, PDF, XML, audit, or related document; document and delivery status; template settings; and limited delivery logs. Connected Google and Microsoft identity and token data is handled as described above. Disconnecting removes the active mailbox connection and its stored tokens; statutory accounting documents or minimal delivery records may remain when the merchant or applicable law requires them.

Appsetup Dashboard and support

The dashboard processes merchant and shop identifiers, contact details, installed-app and plan status, locale, administrative settings, authenticated sessions, security and error logs, and support messages or attachments. We use these records to authenticate users, manage the merchant's services, answer support requests, prevent abuse, and communicate material service information.

5. How we use information

Provide, configure, secure, and support the Services.
Process delivery selections, checkout rules, merchant campaigns, content features, digital receipts, and audit records.
Send documents and service communications requested by merchants.
Apply plan limits, prevent fraud or abuse, diagnose errors, and improve reliability.
Meet Shopify, provider, tax, accounting, security, and legal requirements.

6. Storage and security

We use reasonable technical and organizational safeguards, including encrypted HTTPS connections, access controls, environment separation, credential protection, and provider-managed encryption at rest where applicable. Mailbox OAuth tokens stored by Digital Receipts are encrypted before database storage. No transmission or storage system is completely secure.

7. Sharing and subprocessors

Information may be processed by Shopify, Google or Microsoft when their integrations are selected, hosting and database providers, email and support providers, courier or map providers used by activated features, and professional advisers or authorities where legally required. We limit disclosures to the information reasonably needed for the relevant service. We do not sell or rent merchant or customer personal data.

8. Retention, disconnection, and deletion

We retain information only while reasonably necessary to provide the Services, meet legal obligations, resolve disputes, and maintain security. Shopify data is also subject to the merchant's and Shopify's retention settings.

Retention depends on the record: active settings and operational data normally remain while the Service is installed or needed; security and delivery logs are kept for a limited operational period; COD recovery snapshots follow the periods described above; and tax, billing, consent, dispute, or accounting records may be retained for the period required by applicable law. Deletion from backups may occur on the backup rotation schedule.

A merchant can disconnect a mailbox from the Digital Receipts page. Disconnecting disables automatic delivery and deletes the stored mailbox connection, including its encrypted OAuth tokens, from the active Appsetup database. A user can also revoke Google access from the Google Account third-party connections page. To request access, correction, export, or deletion, email team@appsetupeng.com. We may retain limited records where required by tax, accounting, fraud-prevention, or other law.

9. Merchant and customer rights

Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of their personal data. Customers should normally contact the merchant that controls their order data. We assist merchants with valid requests and process applicable Shopify access and redaction requests.

10. International processing and children

Service providers may process information in countries other than the user's country, subject to applicable safeguards. The Services are intended for merchants and are not directed to children. We do not knowingly collect personal information directly from children through an Appsetup account.

11. Changes and contact

We may update this Policy to reflect changes to the Services, providers, or law. The effective date above identifies the current version. Questions and privacy requests may be sent to team@appsetupeng.com.