PinServe: Pincode CheckerNo customer records
Names, emails, addresses and orders are never stored. The app has no access to them.
What PinServe does
PinServe is a Shopify app operated by Apsentic. Merchants list the pincodes they deliver to. Shoppers can then check their pincode on the product page, and checkout stops orders going to a pincode that is not on the list.
What we store
When a merchant installs PinServe, we keep only what the app needs to run:
| Data | What it is | Why we keep it |
|---|---|---|
| Store domain | Your myshopify.com address | Identifies which store the data belongs to |
| Shopify access token | Issued by Shopify at install | Lets the app set up your checkout rule |
| Pincode list | The pincodes you add or import | Answers delivery checks and powers the checkout rule |
| Widget settings | Labels, messages, button color | Controls how the widget looks on your store |
The access token sits in a session record created by Shopify's official app library. PinServe uses offline access tokens only, so these records hold no staff names or email addresses.
A compact copy of your pincode list and your failure message is also saved in your own store's app metafields, so Shopify can run the checkout rule. Paid plans are billed by Shopify. We see whether a plan is active, and never see your card or bank details.
What we do not collect
PinServe does not collect or store customer names, email addresses, phone numbers, delivery addresses, orders or payment details. It has no permission to read them from Shopify, and it builds no profile of any shopper.
Shoppers and pincode checks
When a shopper uses the widget, the pincode goes through Shopify's app proxy to our server, which replies whether delivery is available. The pincode is not saved to our database and is not linked to a person.
Routine server logs can briefly include the pincode in the request address. These logs rotate automatically. To stop abuse, the visitor's IP address is held in memory for a few minutes to limit repeated requests, and is not saved.
At checkout
The pincode check at checkout is a Shopify Function that runs on Shopify's own systems, using the list saved in your store. The shopper's address is not sent to PinServe.
Shopify permissions
PinServe asks for one permission, write_validations, which it uses to turn on the checkout rule. It has no access to your customers, orders or products.
Cookies and tracking
The storefront widget sets no cookies and saves nothing in the shopper's browser. PinServe has no analytics or advertising trackers.
Security
- All traffic is served over HTTPS.
- Requests from your storefront are checked against Shopify's app proxy signature before they are processed.
- Pincode checks are rate limited to stop abuse.
- Collecting no customer records keeps the risk low in the first place.
Retention and deletion
We keep your data while the app is installed. Uninstalling deletes your pincode list, settings and access token from our database. Nightly backups can hold a copy for about 15 days before they expire.
PinServe handles Shopify's mandatory compliance webhooks:
customers/data_requestandcustomers/redact: we hold no customer personal data, so there is nothing to return or delete.shop/redact: sent by Shopify after a store uninstalls. We delete everything held for that store.
Your rights
Merchants can view, change or export their pincodes in the app at any time, and can ask us for a copy or deletion of their data.
Customer data in a store belongs to that merchant, who is responsible for it under laws such as India's Digital Personal Data Protection Act, 2023. Because we hold no customer records, shoppers should contact the store they bought from about their personal data.
Changes to this policy
If this policy changes, we will update this page and its effective date.