DoorPin Privacy Policy
DoorPin (“we,” “us,” “our”) is a Shopify app built and operated by MoeZee Shop. This policy explains what data DoorPin accesses and stores when a merchant installs it, and what we do and don’t do with it.
What DoorPin does
After a customer completes checkout, DoorPin asks them to share their exact delivery location (GPS coordinates or a manually placed map pin) so the merchant’s courier can find them reliably. That location is attached directly to the customer’s own order.
What data we access
DoorPin requests the write_orders access scope (write access implies read access). Through this scope we:
- Write the customer-provided latitude, longitude, capture timestamp and capture method to app-owned metafields on the specific order the customer just placed.
- Read order data back to display location status to the merchant and to verify an order belongs to the requesting shop before accepting a location for it.
Courier links and CSV export (paid plans)
On paid plans a merchant can generate a read-only link for one order and send it to a courier, and can export captured locations as a CSV file. A courier link shows only the order number and the pin, with no customer name, phone number or address, and it expires after 7 days. The CSV contains order number, order date, coordinates, capture time and method. Both are created by the merchant, who decides who receives them.
Where the location data lives
DoorPin’s own database does not store captured coordinates, or any other customer or order data. The app-owned order metafield on Shopify’s own systems is the single copy. This significantly limits what DoorPin itself holds outside of Shopify.
DoorPin’s database does store one thing: the OAuth session token that lets the app talk to a merchant’s store after install. That is deleted immediately on uninstall.
Customer consent and control
Location sharing is opt-in: the customer must actively tap the share-location button (triggering their browser or device’s own native location-permission prompt) or manually place a pin. No location is captured without that explicit action.
Third-party map services
If a customer places a pin manually, the map page loads the open-source Leaflet library from cdnjs (Cloudflare) and map tiles from OpenStreetMap. The customer’s browser contacts those services directly, which can reveal the general area of the map being viewed. DoorPin does not send the captured coordinates to them.
Data retention and deletion
If a merchant uninstalls DoorPin, we delete our own session data for that shop immediately via Shopify’s mandatory app/uninstalled webhook.
Captured locations are deleted automatically. While DoorPin is installed, it removes the location metafields from every order that is older than 30 days (a scheduled job that runs at least every 6 hours). If DoorPin is uninstalled before that happens, the metafields stay on the merchant’s own orders until the merchant deletes them; the merchant controls that data the same way they control any other order data.
DoorPin handles Shopify’s three mandatory compliance webhooks:
customers/redact: we delete DoorPin’s location metafields from the orders Shopify lists for that customer.customers/data_request: DoorPin keeps no separate copy of customer data. A captured location exists only as metafields on the merchant’s own order, so the merchant can export it from their Shopify admin. We confirm which of the listed orders carry a DoorPin location.shop/redact: we delete our remaining session data for the shop.
Your rights
Merchants (data controllers for their own store) and their customers can request details about what DoorPin holds, or request deletion, at any time by contacting us.
Changes to this policy
If this policy changes, we’ll update the “Last updated” date above. Material changes will also be communicated to installed merchants.
Terms and data processing
Our Terms of Service and Data Processing Addendum describe the agreement between DoorPin and merchants, including how we process customer data on a merchant’s behalf.
Contact us
Questions about this policy or DoorPin’s data practices: [email protected].