Privacy Policy

What we collect

Through the app. When a merchant installs Address Verifier, we receive the shipping-address fields needed to verify deliverability (street, city, postal code, region, country), the order reference they belong to, and basic store details (store name, plan, contact email). We don't ask for payment details, browsing history, or anything else.

Through this website. Standard server logs (IP address, browser type, pages requested) and anonymous usage analytics through Google Analytics, which we run in a cookieless mode: storage is denied by default, so it sets no cookies and can't follow you across sites. It counts page views and rough traffic sources, nothing that identifies you.

When you email us. Your email address and whatever you write, used only to answer you.

How we use it

We use the address fields for one thing: returning a validation result. Store details are used for billing through Shopify and for support.

The results cache. Validation results are cached and shared across the stores that use Address Verifier. An apartment building, office, or dorm that was verified once doesn't need a fresh check the next time a customer enters it, which keeps validation fast. Each entry is keyed by a one-way hash of the address with no name, no order, and no store attached, so the cache can't be used to look anyone up. The only address text an entry holds is the verified, corrected form of the address itself; what the customer typed is not kept.

Who we share it with

Address fields are sent to our address-data provider (currently Shippo, a US company) strictly to perform the verification against carrier data. Our infrastructure providers host the service. That's the whole list. We don't sell personal data, and we don't use customer addresses to build advertising profiles.

How long we keep it

Cached validation results expire on their own: after 90 days for an address verified as deliverable, 30 days for one confirmed undeliverable, and 7 days for everything in between (corrections and partial matches). A single address can also be erased from the cache on request. When a merchant uninstalls the app, we delete the store's data; we honor Shopify's data-deletion requests (customers/redact, shop/redact) and data-access requests (customers/data_request) as part of normal operation. Server logs rotate on a short schedule.

Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere), you can ask us to show, correct, or delete personal data we hold. Email contact@address-verifier.com and we'll handle it. If you're a customer of a store that uses Address Verifier, the store is the controller of your data; contact the store first and we'll support their request.

Merchants: the terms under which we process your customers' data on your behalf are in our Data Processing Agreement.

Security

Data is encrypted in transit and at rest. Access is restricted to the people who operate the service. If a breach ever affects your data, we'll tell you what happened and what we're doing about it, without sitting on it.

Changes

If this policy changes in a way that matters, we update this page and the date at the top. We won't quietly weaken it.