Privacy policy

Last updated: October 2, 2026

Pinwise (“the app”) is a Shopify app operated by Tidybolt (“we”). This policy explains what information the app uses when a merchant installs it, and why.

Information we collect

• Store details: the store’s myshopify.com address, the access token that lets the app call Shopify and the granted permissions.
• Locations you enter: for each store, dealer or pickup point, the name, address, phone number, website, opening hours, tags and map coordinates. This is business information that you choose to publish on your own store.

The app does not collect any information about your customers. It does not read your customers, orders or products. Visitors of your locator are not tracked and nothing about them is stored.

Map and address search

• Addresses of your locations, and the address or postal code a visitor types into the search box, are sent to OpenStreetMap’s Nominatim service (nominatim.openstreetmap.org) to find their position. The search text is sent through our server, which keeps only a short-lived copy in memory (not linked to the visitor) to avoid repeating the same lookup; OpenStreetMap does not receive the visitor’s IP address from this step.
• The map pictures are loaded by the visitor’s browser from OpenStreetMap’s tile servers (tile.openstreetmap.org), and the map script from unpkg.com (the open-source Leaflet library). Those services receive the visitor’s IP address and the part of the map being shown, like any website that embeds a map.
• If a visitor presses “Use my location”, the browser asks permission first. The position is used in the visitor’s browser only to sort the list by distance; it is never sent to us.

What we do not do

• We do not sell, rent or share store data with third parties for their own use.
• We do not use advertising or analytics trackers, and we do not set cookies of our own.

Payments

Subscriptions are billed by Shopify. We never see or store your card or bank details.

Where the data is stored

The app runs on a private server rented from Hostinger, our hosting provider. Access tokens are encrypted in the database. Connections use HTTPS. Access to the server is limited to the operator.

How long we keep data

• When you uninstall the app, its access token is deleted right away.
• Shopify then sends a deletion request (usually 48 hours later). On receipt, we delete every record about your store.
• Server backups are kept for 14 days at most, then deleted.

Your rights

Depending on where you live (for example in the European Union, the United Kingdom or California), you may ask to access, correct, export or delete the information about you. For any request, write to support@tidybolt.cloud. We answer within 30 days.

Changes to this policy

If the app starts using new kinds of data, we will update this page and the date above before the change takes effect.

Contact

Questions about this policy: support@tidybolt.cloud.