Pointify — COD Pickup Points

Privacy Policy

Last updated: April 28, 2026

1. Introduction

This Privacy Policy describes how Pointify — COD Pickup Points ("the App", "we", "us") collects, uses, and handles data when you install and use our Shopify application. By installing the App, you agree to the practices described in this policy.

2. Data We Collect

The App collects only the minimum data required to function:

• Shop domain — to identify your Shopify store (e.g. yourstore.myshopify.com).
• Shopify access token — to interact with the Shopify API on your behalf (creating script tags, registering webhooks, setting order metafields).
• FoxPost API key — provided voluntarily by the merchant to enable FoxPost pickup point selection.
• MPL API key — provided voluntarily by the merchant to enable MPL (Magyar Posta) parcel locker selection.
• GLS API key — provided voluntarily by the merchant to enable GLS parcel shop selection.
• Button customization settings — button text, colors, and border radius configured in the admin panel.
• Data destination preference — whether pickup point data is saved to order note, shipping address line 2, or both.
• Automatic shipment credentials (optional) — if the automatic parcel creation feature is enabled, the following additional credentials may be stored: FoxPost username, password, and API key; GLS MyGLS email address, password, client number, and sender address (company name, street, house number, city, ZIP); MPL agreement code and account code. These credentials are stored securely and used exclusively to create parcels in the carrier's system when a qualifying order is received.
• Subscription and billing data — current plan name, subscription status, Shopify subscription ID, trial end date, trial order count, and monthly order count. This data is used solely to enforce plan limits and is managed via Shopify Billing.
• Invoicing details — company/legal name, billing address (street, city, ZIP, country), and optionally an EU VAT number, provided voluntarily by the merchant in the Billing Details section. This data is used exclusively to issue invoices for paid subscriptions. If an EU VAT number is provided, it is validated against the European Commission's VIES database; the validation timestamp and EU member state code are also stored as an audit record.

3. Customer Personal Data

The App does not collect or store any personal data of your customers (shoppers), including names, email addresses, phone numbers, or physical addresses.

When a customer selects a pickup point, the selected point's name and ID are written directly into the Shopify order as structured order metafields (namespace: pointify) and optionally into the order note or shipping address line 2 via the Shopify API. This data is stored exclusively within your Shopify store — not on our servers.

Automatic parcel creation: If you enable the automatic shipment creation feature for FoxPost, GLS, or MPL, the App reads customer data from the Shopify order (name, phone number, and email address — as captured by the Releasit COD Form) and transmits it to the respective carrier API solely to create the shipping parcel. This customer data is forwarded directly to the carrier and is not stored on our servers.

4. How We Use the Data

• Shop domain and access token — used solely to manage the ScriptTag, webhooks, and order metafields on your store.
• API keys (FoxPost, MPL, GLS) — embedded into the storefront script to authenticate with the respective carrier APIs directly from the browser.
• Automatic shipment credentials (FoxPost, GLS, MPL) — used server-side to create shipping parcels in the carrier's system when an order with a pickup point selection is received via Releasit COD Form.
• Customization settings — used to render the pickup point buttons as configured by you.
• Subscription and billing data — used to enforce monthly order limits according to your active plan and to manage the trial period.
• Invoicing details (company name, address, VAT number) — used solely to generate invoices for paid subscriptions via Számlázz.hu. The EU VAT number is validated via the VIES API; the validation result and timestamp are retained as an audit record.

We do not sell, share, or disclose your data to third parties except as required to operate the App (FoxPost, MPL, and GLS APIs; Shopify Billing; Számlázz.hu invoicing).

5. Data Storage

Merchant data (shop domain, access token, API keys, settings) is stored in a PostgreSQL database hosted on Railway.app (EU region). Data is retained as long as the App is installed on your store.

6. Data Retention and Deletion

• When you uninstall the App, your shop's data (access token, API keys, settings) is deleted from our database within 48 hours.
• We respond to Shopify's mandatory GDPR webhooks: customers/data_request, customers/redact, and shop/redact.
• Since we do not store customer personal data, customer data requests and erasure requests are acknowledged with no action required on our end.

7. Third-Party Services

• Shopify — the platform through which the App operates. Subject to Shopify's Privacy Policy.
• FoxPost — pickup point data is fetched from FoxPost's API using your API key. If automatic shipment creation is enabled, customer order data (name, phone, email) is also transmitted to FoxPost's API server-side to create shipping parcels. Subject to FoxPost's privacy policy.
• MPL (Magyar Posta) — parcel locker location data is fetched from Magyar Posta's public data source. If automatic shipment creation is enabled, customer order data is transmitted to MPL's API to create shipping parcels. Subject to Magyar Posta's privacy policy.
• GLS Hungary — parcel shop location data is fetched from GLS's API. If automatic shipment creation is enabled, customer order data is transmitted to GLS's MyGLS API to create shipping parcels. Subject to GLS's privacy policy.
• Shopify Billing — subscription charges are processed through Shopify's billing system. Subject to Shopify's Privacy Policy.
• Railway.app — database and hosting provider. Subject to Railway's Privacy Policy.
• Számlázz.hu — invoicing service used to generate PDF invoices for paid subscriptions. Merchant invoicing details (name, address, VAT number) are transmitted to Számlázz.hu solely for this purpose. Subject to Számlázz.hu's Privacy Policy.
• EU VIES (European Commission) — VAT Information Exchange System used to validate EU VAT numbers provided by merchants. No personal data is shared; only the VAT number is submitted for validation. Subject to the European Commission's privacy notice.

8. Security

We use industry-standard security practices: HTTPS for all communications, HMAC signature verification for all incoming Shopify webhooks, and access tokens are stored securely in an encrypted-at-rest database.

9. Your Rights

As a merchant, you may request deletion of your data at any time by uninstalling the App or by contacting us directly. We will delete all associated data within 48 hours.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or your data, please contact us: