ShipEstimate

Privacy Policy

Last updated: April 8, 2026

1. Who we are

ShipEstimate is operated by Michal Bajcar, based in Prague, Czech Republic. This policy describes how ShipEstimate ("we", "our", "the app") handles data when you use our Shopify application.

2. Data we collect from merchants

When you install ShipEstimate, we store:

  • Your Shopify store domain (e.g., your-store.myshopify.com)
  • An access token provided by Shopify for API access
  • Your widget configuration settings (colors, messages, preferences)
  • Cached shipping zone and rate data from your Shopify settings
  • Daily aggregate widget impression counts (not tied to individual customers)

3. Data we collect from customers

We do not store any customer personal data. When a customer visits a product page with the ShipEstimate widget:

  • Their IP address is used transiently to determine their country via a geolocation service (ip-api.com). The IP address is never stored in our database.
  • No names, emails, addresses, or other personal information is collected or stored.
  • We track aggregate daily impression counts per store and per country (total views, not per-customer). Only the country code is stored — no city, region, or precise location.

4. Third-party services

ShipEstimate uses the following third-party services:

  • ip-api.com — Primary IP geolocation to determine customer country.
  • ipinfo.io — Fallback IP geolocation when the primary provider is unavailable.
  • Railway — Cloud hosting and PostgreSQL database. Data is stored in EU (europe-west4).
  • Shopify — Platform APIs for shipping rates, billing, and authentication.

5. Data retention

We retain merchant data for as long as the app is installed. When you uninstall ShipEstimate or request data deletion:

  • All session data is deleted immediately on uninstall.
  • All shop data (settings, cached zones, impressions) is deleted when Shopify sends the shop/redact webhook, typically within 48 hours of uninstall.

6. GDPR compliance

ShipEstimate supports Shopify's mandatory GDPR webhooks: customers/data_request, customers/redact, and shop/redact. Since we do not store any customer personal data, customer data requests and redaction requests are acknowledged but require no action.

7. Your rights

You have the right to access, correct, or delete your data. To exercise these rights, contact us at [email protected].

8. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the app.

9. Contact

Michal Bajcar
Prague, Czech Republic
[email protected]