Privacy Policy
Updated 17 October 2026
This Privacy Policy explains how Vendkit (“we”, “us”) handles data when a Shopify merchant uses PickaDate (the “App”), an app that adds a delivery-date picker to the merchant's cart so shoppers can choose the day they want their order delivered.
1. Who we are and our role
The App is operated by Vendkit. When a merchant installs PickaDate, the merchant is the data controller and Vendkit acts as a data processor: we process data only to provide the App's features to that merchant, on their instructions. Our processing terms are set out in the Data Processing Addendum in our Terms of Service.
2. Data we access in your store
PickaDate asks Shopify only for the permissions it needs:
| Shopify data | Permission | Why we need it |
|---|---|---|
| Orders (through order notifications) | read_orders | Read the delivery date, time slot, pickup-or-delivery choice and delivery zone the shopper chose, count deliveries per day so your daily and time-slot limits are respected, and list your upcoming deliveries. |
| Orders (write) | write_orders | Add one tag to each new order, such as “Delivery 2026-10-14” or “Pickup 2026-10-14”, so you can filter orders by day in Shopify. You can turn this off in Settings. Nothing else on the order is changed. |
| Checkout rules | write_validations | Create one checkout rule that asks for a delivery date when you turn on “Require a delivery date”. The rule only reads the delivery date in the cart; it reads nothing about the shopper. |
Shopify includes some customer fields (such as name and email) in the order notifications it sends us. We ignore them and never save them.
3. Data we store
| What | Details | Kept for |
|---|---|---|
| Delivery settings | Your delivery weekdays, lead time, cut-off time, blackout dates, time slots, picker text and colour, plan and setup progress. | Until you uninstall. |
| Delivery records | For each order with a delivery date: the Shopify order ID, the order number (for example #1001), the chosen date and time slot, whether it is a pickup or a delivery, the name of the delivery zone (if you use zones), the names and quantities of the products in the order (so you can print a day list), whether the order arrived without a date (so you can ask the customer), and when it was recorded. No customer details. | 12 months after the delivery date, then deleted automatically. |
| Date changes | Each time a delivery date is set or changed after the order was placed: the Shopify order ID and number, the old and new date and time slot, who changed it (you or the customer) and when. No customer details. | 12 months after the delivery date, then deleted automatically. |
| Help Center messages | What you type in the Help Center contact form: your reply email, the topic and the message, with your store's address. We also email it to our support inbox so we can reply. | Until you uninstall, then deleted with your store's data. |
| AI help chat (Pro plan) | Only a count of how many chat messages your store sent each month. The words of a chat are not stored by us. | Until you uninstall. |
| Access log | A line each time the run sheet shows customer details or an email is written from an order: your store, which of the two, the day shown, how many orders and the time. No names, emails, phones or addresses. | 12 months, then deleted automatically; deleted with your store's data. |
| Session details | Your staff name and email, and the access token Shopify gives the App to act on your store. | Until you uninstall. |
The chosen delivery date is also saved on the order inside Shopify, where you control it. When an email is sent to a customer, PickaDate reads their email address, first name and language from the order in Shopify at that moment and hands them to the email service; nothing is saved. The queue of emails keeps only the order number and the send time. The calendar feed you can switch on lists order numbers, times, areas and product names, never customer details, and is protected by a secret address. When you open the Run sheet and choose to show customer details, PickaDate reads the customer's name, phone number, delivery address and order note from Shopify at that moment, only to show and print them. They are not saved. When you set a date on an order or a phone (draft) order from the Shopify admin, the date is saved on that order in Shopify. If you let customers change their own date, each new order also carries a personal link as an order attribute in Shopify; the page it opens shows only the order number and the delivery date and times, and checks that the link belongs to that order. If you use delivery zones, the postcode the shopper types is saved on their cart and order in Shopify so you can see where to deliver, but PickaDate does not keep it: we only keep the zone name.
4. Why we process it (legal basis)
| Purpose | Legal basis |
|---|---|
| Showing the date picker and enforcing your delivery limits | Performance of our contract with the merchant |
| Listing your upcoming deliveries | Performance of contract; the records hold no customer details |
| Keeping the App secure and fixing errors | Our legitimate interest in running a reliable service |
| Emailing your customers (confirmation, reminder, change link) and you (daily digest, alerts) when you turn these on | Performance of our contract with the merchant |
| Answering your questions in the Help Center and the AI help chat | Performance of our contract with the merchant |
| Billing your plan through Shopify | Performance of contract |
5. Who we share data with
We never sell or rent data. We use these providers (sub-processors) to run the App:
| Provider | What they do | Location |
|---|---|---|
| Shopify | The platform the App runs on; source of order data; billing. | Canada / global |
| Railway | Hosts the App's servers. | United States (East) |
| Supabase | Database, encrypted at rest. | Canada (Montréal) |
| Resend | Sends the emails you turn on. It receives the customer's email address and first name only at the moment an email is sent; PickaDate does not keep them. | United States |
| Anthropic | Writes the answers in the AI help chat (Pro plan). It receives only the question you type and the earlier messages of that conversation. The chat sends no customer or order data. | United States |
| Sentry | Error monitoring. Personal data is removed from error reports before they are sent. | United States |
6. International data transfers
Data may be processed in Canada and the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on the safeguards offered by our providers, such as the European Commission's Standard Contractual Clauses and Canada's adequacy decision.
7. Retention and deletion
- Delivery records are deleted automatically 12 months after their delivery date.
- When you uninstall, we remove your session details straight away. Shopify then asks us, about 48 hours later, to delete your store's data, and we permanently delete everything we hold for your store. Copies in our daily backups are overwritten within 7 days.
- We respond to all of Shopify's mandatory privacy requests (customer data request, customer redact and shop redact). Because PickaDate holds no customer names or contact details, customer requests have nothing to return beyond order numbers, which we delete on request.
8. Cookies
PickaDate sets no advertising or tracking cookies. The date picker on your cart saves the chosen date as a standard Shopify cart attribute.
9. Your rights
Depending on where you live, laws such as the GDPR and CCPA give you rights to access, correct, delete, restrict or port your personal data, and to object to processing. Shoppers should send requests to the store they bought from (the merchant, who is the controller). Merchants can exercise these rights by contacting us or by uninstalling the App. You may also complain to your local data-protection authority.
10. Security
All data is sent over HTTPS and stored in encrypted databases. Every request from Shopify, and every request from your storefront picker, is verified with its signature before we act on it, and records are only read or changed for the store that owns them. Access to production systems is limited to the App's operator, and we keep daily database backups for 7 days, after which they are overwritten. To protect the App from abuse we briefly count requests per IP address, for about a minute, in the server's memory; this count is discarded and is not stored in our database. Our hosting provider may keep standard request logs for a short time.
11. Children
The App is a business tool and is not directed at children. We do not knowingly process children's data.
12. Changes to this policy
We may update this policy as the App changes. The “Updated” date at the top shows when it last changed; for significant changes we will notify merchants in the App.
13. Contact us
Vendkit — support@vendkitapps.com. We reply within one business day.