Privacy Policy

Effective date: November 8, 2026

Address Guard (the "App") is a Shopify app that automatically detects shipping address mistakes at checkout — such as a prefecture name duplicated into another field, or the city name or address text entered twice — and blocks checkout completion when one is found. The App is installed and used by the store's administrator (the merchant).

Data We Collect

The App may collect and use the following data to provide its features:

Shipping address data entered at checkout (postal code, prefecture, city, street address, building name, etc.): referenced on the spot to run checkout validation.

Store data provided by Shopify at install time: the shop domain, the access token (and its refresh token), and the granted access scopes. The App does not store the name or email address of individual administrators.

Check settings configured by the merchant: the on/off state of each check (city-name duplicate, repeated text, postal code and prefecture match, non-existent postal code, missing street number), and the list of cities allowed to repeat. These contain no personal information.

The admin display language setting (Japanese/English): stored in the browser.

Subscription status (pricing plan): obtained from Shopify and used only to decide whether the App may run for the store. It is not stored and contains no personal information.

Operational logs: access time, shop domain, results of subscription checks, error details, and similar technical information, recorded to investigate issues. Customer personal information and shipping addresses are not recorded.

Purpose of Use

Collected data is used for the following purposes:

To detect shipping address mistakes at checkout and block completion

To connect the App to the store and provide its features

To apply the merchant's check settings (including exceptions) to checkout validation

To switch the checkout validation on or off according to the store's subscription

To display the admin screen in the user's chosen language

To maintain the App, investigate issues, and improve features

To respond to inquiries from users (merchants)

Personal Information

Address validation runs entirely within Shopify's own infrastructure, using Shopify Functions (checkout validation). The address data entered is used only on the spot within this mechanism and is never transmitted to or stored on servers operated by the App's developer (TYZO Inc.). The Japan Post postal code data used for the postal code checks is built into this mechanism, and no outside lookup is made.

The App does not collect or store customer names, phone numbers, payment information, or other personal information.

Cookies

The App's admin screen (a settings page embedded in the Shopify admin) uses a single cookie to remember the display language (Japanese/English). This cookie does not contain any information that could identify an individual. The checkout-side feature (validation) does not use cookies.

Sub-processors

The App uses the following third-party service to process and store data:

Google Cloud Platform (Cloud Run, Cloud SQL, Secret Manager, Cloud Logging, Cloud Scheduler): infrastructure services provided by Google LLC (US). Used to run the App, to store install data (shop domain, access token, etc.), to manage credentials, to retain operational logs, and to run the periodic subscription check.

Data handled by this sub-processor is governed by its own privacy policy and data processing agreement. Except as described above, and except as required by law, the App does not disclose collected data to third parties without the user's consent.

Data Retention and Deletion

Install data (shop domain, access token, etc.) is stored in PostgreSQL (Google Cloud SQL) for as long as the App remains installed on the store. Once a merchant uninstalls the App, the stored install data is promptly deleted.

Check settings (including exceptions) are stored in Shopify metafields and are not stored on the App's servers or database.

Operational logs are retained for about 30 days and then deleted automatically.

Shipping address validation happens on the spot at each checkout and is never stored on the App's servers or database.

The App implements the following mandatory Shopify webhooks:

customers/data_request: the App does not retain any personal data about customers, so there is no data subject to disclosure.

customers/redact: the App does not retain any personal data about customers, so there is no data to delete.

shop/redact: the install data tied to that store is deleted.

Encryption and Security

Data processed and stored by the App is encrypted both in transit (TLS/HTTPS) and at rest. Connections to the database are accepted only when encrypted.

Secrets such as access tokens, database credentials, and the credential used to check subscription status are kept out of the source code and repository, and are managed in an encrypted secret management service (Google Cloud Secret Manager).

GDPR, CCPA, and Similar Regulations

Because address validation is completed entirely within Shopify's own infrastructure, the App does not collect or store customer names, phone numbers, payment information, or other personal information on its own servers. Its handling of personal data under regulations such as the GDPR (EU General Data Protection Regulation) and the CCPA (California Consumer Privacy Act) is accordingly limited. Users in regions covered by data protection laws, including the EU and California, may submit disclosure or deletion requests to the contact address below; we will respond within a reasonable time.

Security Incident Response

In the event of a security incident affecting personal data, the developer will investigate promptly and take appropriate corrective action. Affected merchants will be notified within a reasonable time, in accordance with applicable law, using the contact details in this policy.

Changes to This Policy

This policy may be updated to reflect changes in applicable law or in the App's features. Material changes will be announced on this page.

Contact

info@tyzoinc.com