Privacy policy

Last updated October 27, 2026.

Popby is a store locator app for Shopify, made by Bonshore. This policy explains what Popby collects when a merchant installs it and when shoppers use it on a merchant’s store, what we do with it, and how it’s deleted.

What we collect from merchants

• Your store information from Shopify: your shop’s domain, time zone and the access Shopify grants the app when you install it.
• What you add to Popby: store locations (names, addresses, phone numbers, hours, map positions), retailers and their logos, the products linked to them, and your design and page settings.
• Your Shopify locations, if you import them, kept in step through Shopify’s location webhooks.
• Support reports you send from the app: your message, the page you were on, technical details about the problem, and the reply email you give us.
• Your plan, read from Shopify’s billing. We never see or store payment details; Shopify bills you.

What we collect from shoppers

Popby doesn’t store any personal information about shoppers: no names, emails, orders, IP addresses or locations.

• Searches. When a shopper searches for nearby stores, the place they type, or their location if they choose “Use my location”, is sent to Popby to find stores, then forgotten. Typed places are sent to our geocoding provider to find them on the map.
• Usage counts. If a shopper allows analytics in the store’s cookie banner, Popby counts events such as locator views, searches and store clicks. We keep only daily totals per store, with nothing that identifies a shopper. A shopper’s IP address is used briefly to limit abuse and is never stored.
• Maps and directions. Map images load from OpenFreeMap in the shopper’s browser. “Directions” opens Google Maps. Those services see the shopper’s request under their own privacy policies.

How we use it

Only to run Popby: show your stores to shoppers, keep them up to date, show you analytics, bill through Shopify, and answer support requests. We don’t sell data, use it for advertising, or share it except with the providers below.

Who processes it for us

• Cloudflare hosts the app and its database.
• Geocodio turns addresses and typed places into map positions.
• Resend delivers support reports to our inbox, and Google Workspace hosts that inbox.
• Shopify provides your store information and handles billing. We also send Shopify counts of app activity per store (for example “an import finished with 120 stores”) so we can see where merchants get stuck; these never include personal information.

How long we keep it

While Popby is installed, we keep your data so the locator keeps working. You can delete stores and retailers at any time. When you uninstall, Shopify tells us 48 hours later to erase your shop’s data, and we delete all of it: locations, retailers, settings, analytics and support reports. Encrypted database backups expire within 30 days.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Shoppers can make requests through the merchant; since Popby holds no shopper data, there is nothing for us to return or delete. Contact us at popby-support@bonshore.com.

Changes

If we change this policy, we’ll update the date above. Significant changes will also be shown in the app.