Pincode Checker Privacy Policy

Last updated: 23 Oct 2026

This policy explains what information the Pincode Checker by Progryss Shopify app (“the App”, also shown as ZipETA) collects, how we use it, and the choices available. The App is provided by Progryss Media Private Limited (“Progryss”, “we”, “us”).

By installing or using the App, a merchant agrees to this policy. Shoppers use the App through a merchant’s store; for them, the merchant’s own privacy policy also
applies.

 1. Who is responsible for what

– Merchants’ own information (store and account details): Progryss is the controller.
– Shopper information (pincode lookups and “Notify me” contact details): the merchant is the controller and Progryss processes it on the merchant’s behalf, to provide the App.

2. Information we collect from merchants

When a store installs and uses the App, we collect:

– tore details: store name, myshopify.com domain, primary domain, Shopify store ID, country, and the store owner’s name, email address and phone number as provided by Shopify. We use these to operate the App and to contact the merchant about their account.
– App configuration: delivery zones (names, pincodes, whether each is deliverable, delivery times, whether Cash on Delivery is available), any product and collection IDs and titles a zone is limited to, and widget settings such as messages, colours and layout.
– Plan and billing: the plan chosen, subscription status and history (plan, price, billing interval, trial), handled through Shopify Billing. Payments are processed by Shopify; we never see card or bank details.
– Checkout settings: if the merchant enables checkout enforcement, their settings and the identifiers of the checkout rules the App creates in their store.

3. Information about shoppers

The App is designed to collect as little as possible about shoppers.

– Pincode lookups: the postal/PIN/ZIP code a shopper enters and whether the store delivers there, with the time of the check. The product being viewed is used to answer the check but is not stored. Lookups are not linked to a name, email, account or IP address.
– “Notify me” requests (only if the merchant turns the feature on; not offered to stores in the EEA, the UK or Switzerland):
– Delivery details on orders (only if the merchant turns the feature on): after a check, the App adds the pincode, estimated delivery date and Cash on Delivery status to the shopper’s Shopify cart, so they appear on the order. This information is stored by Shopify as part of the order; the App does not keep a copy.
– Checkout rules (only if the merchant turns the feature on): the App can block checkout to a pincode the store doesn’t deliver to, and hide Cash on Delivery where it isn’t offered. These rules run on Shopify’s own servers during checkout and read the shipping postal code, country and the names of the payment methods.

This information is not sent to us.

Browser storage.To save shoppers re-typing their pincode, the App stores the last pincode they checked in their browser’s local storage, plus a few technical values in session storage (which connection to use, whether to load optional features, and a marker to avoid saving the same delivery details to the cart twice). The App sets no cookies of its own and uses no tracking or
advertising technologies. It reads Shopify’s cart cookie only to tell whether a new cart has started.

Server records. Our server access logs record which App address was requested and when, without shopper IP addresses. To protect the “Notify me” form from abuse, the shopper’s IP address is checked against a short rate limit in memory and is never stored. Server error logs may record technical details, including an IP address, when a request fails.

We do not request access to Shopify’s customer records (names, emails, addresses) through Shopify’s APIs. We never sell personal information or use it for advertising.

4. How we use information

– To answer pincode checks and apply each merchant’s zones and settings, including at checkout when the merchant enables it.
– To show merchants search analytics and the “Notify me” requests they received.
– To manage plans and billing through Shopify, and to provide support.
– To keep the App secure, prevent abuse, and meet legal obligations.

5. “Notify me” — information for merchants

If you turn on “Notify me”, you are collecting your shoppers’ contact details.
Make sure your store’s privacy policy covers it. You can view, export and delete
these requests at any time in the App, and they’re deleted automatically if a
shopper asks Shopify to erase their data (§7) or you uninstall the App (§6).

6. How long we keep information

When a merchant uninstalls the App, Shopify notifies us about 48 hours later, and we then permanently delete that store’s delivery zones, settings, pincode lookup records, “Notify me” requests and checkout settings, and erase the store owner’s email address, phone number and name. We keep a minimal record of the store (store name, myshopify.com domain, country, and install and uninstall dates) and its billing history, which we need for our business and tax records. Deleted information may remain in backups for up to 30 days before those expire.

7. Shopify privacy requests

The App responds to Shopify’s mandatory privacy webhooks:

– Customer data request: we record any “Notify me” requests held for that shopper; the merchant can see them in the App to answer the request.
– Customer erasure: we delete that shopper’s “Notify me” requests, matched by the email address or phone number Shopify provides.
– Store erasure: we delete the store’s data as described in §6.

Pincode lookup records aren’t linked to a person, so there is nothing in them to return or erase for an individual shopper.

8. Sharing and sub-processors

We share information only with the service providers that run the App, or when
the law requires it or it’s needed to protect rights and security.

We will give merchants notice before adding or replacing a sub-processor.

9. Security and international transfers

Information is encrypted in transit (HTTPS/TLS), access to our systems is restricted, and each store’s data is kept separate from every other store’s.

The App’s servers and database are located in **Bangalore, India**. Where a merchant or their shoppers are in the European Economic Area, the United Kingdom
or Switzerland, we rely on Standard Contractual Clauses for transfers to India.

10. Your rights

Depending on where you live (for example under the GDPR in the EEA/UK, or the CCPA/CPRA in California), you may have the right to access, correct, delete or restrict the use of your personal information, and to object to its use.

– Merchants:contact us at the address below, or uninstall the App to start deletion (§6).
– Shoppers: please contact the store you used — it controls your information. If you left your contact details through “Notify me”, the store can delete them, or you can ask Shopify to erase your data with that store.

We don’t sell or share personal information for cross-context behavioural advertising.

 11. Children

The App isn’t directed at children, and we don’t knowingly collect children’s personal information.

12. Changes to this policy

We’ll update this page when the App changes how it handles information, and change the “Last updated” date. For significant changes, such as a new sub-processor, we’ll notify merchants in advance.

13. Contact

Progryss Media Private Limited
First Floor, Workspace By Innova, H-54, H Block, Sector 63, Noida, Uttar Pradesh
201301, India
Email: progryss@gmail.com

This policy is governed by the laws of India.