Privacy policy · 10 September 2026
Your store’s data has a specific purpose.
Digiboys provides Shipping Payments to help Shopify merchants request and track extra shipping fees. Contact contact@digiboys.co.za about privacy or data rights.
Data we use
We process your store identity, currency, timezone, shipping-tax settings and app permissions. We use selected customer names, email addresses and Shopify customer and order identifiers to prepare invoices. We retain the shipping method, amount, message, request history, invoice identifiers, payment status, refunds and staff activity. Shopify authentication tokens are stored to operate the app. We do not collect card numbers or process card payments ourselves.
Purpose and service providers
Data is used to authenticate staff, verify store compatibility, create and email Shopify invoices, reconcile payments and refunds, enforce the free allowance, verify app subscriptions, provide support and respond to privacy requests. Shopify supplies checkout, invoices, authentication and app billing. Our hosted application and database providers process data on our behalf. We do not sell customer data or use it for advertising.
Access and protection
Store records are scoped to the authenticated Shopify store. Staff require the appropriate Shopify permissions. Data is transmitted over HTTPS. Authentication secrets are kept on the server. Customer data exports are available only to the authenticated store owner. For access auditing, we record the store, staff identifier, operation category and time. These access records exclude customer content and search terms, expire after 30 days and are removed on complete account erasure.
Retention, erasure and backups
We retain account records while they are needed to operate the app. Ordinary reinstallations preserve invoice usage while account records remain. We process Shopify’s signed customer and shop privacy requests within 30 days. Customer erasure removes matching request, send and payment records from the app; limited keyed suppression tokens prevent reimport of erased records while the account remains. Anonymous allowance totals and unresolved reservation counts can remain until complete account erasure.
Required complete shop erasure removes account data, sessions, requests, presets, subscription snapshots and usage history. A fresh installation after erasure receives five free invoices. Temporary data exports expire after 30 days. Affected backups must expire within the same applicable deletion deadline; restoring a backup requires reapplying pending erasures before the application resumes. Records held by Shopify or the merchant are governed by their own retention obligations.
Your rights
Customers should contact the merchant to access, correct or erase their data through Shopify’s privacy controls. Merchants can download requested customer data in the app’s Help screen. You can also contact Digiboys for assistance or raise a concern with the relevant data-protection authority. Service providers may process data outside your country under their applicable safeguards.
Policy updates
We will publish material changes on this page and update the date. Contact us before using the app if you need additional information about data handling.