Privacy Policy
How Date Pilot collects, uses, and protects information when merchants install and use our Shopify app.
1. Who we are
Date Pilot (“we”, “us”, “our”) is a Shopify application operated by Orbitly. This Privacy Policy explains how we handle personal information when you install Date Pilot, configure the app, or when your customers interact with the Date Pilot widget on your storefront.
Contact: support@datepilot.orbitly.com
2. Information we collect
Merchant information
When you install Date Pilot, we receive information from Shopify to operate the app, including:
- Shop domain, shop name, and contact details
- OAuth access tokens required to run the app
- Billing and subscription status through Shopify’s billing API
- App settings you configure (delivery rules, blackout dates, notifications, etc.)
Order and scheduling information
When customers select a delivery, pickup, or ship date at checkout, we process order-related data needed to provide the service, such as:
- Order number, order total, and fulfillment status
- Selected delivery date, time slot, delivery mode, and location
- Customer name and email associated with the order (as provided by Shopify)
- Cart attributes and order tags related to scheduled delivery
Technical information
We may collect limited technical data to secure and improve the app, including server logs, error reports, and diagnostic metadata (for example, shop domain and app version).
3. How we use information
We use collected information to:
- Provide delivery-date scheduling on your storefront and in the admin dashboard
- Store and display scheduled orders, capacity limits, and merchant settings
- Send transactional emails you enable (merchant notifications and customer confirmations)
- Process subscription billing through Shopify
- Monitor reliability, prevent abuse, and fix errors
- Comply with legal obligations and respond to support requests
We do not sell personal information.
4. Service providers
We use trusted subprocessors to operate Date Pilot, including:
- Shopify — app platform, storefront, orders, and billing
- Supabase — secure database hosting for app data and sessions
- Railway — application hosting infrastructure
- Resend — transactional email delivery (when enabled)
- Sentry — error monitoring and diagnostics
These providers process data on our behalf under contractual safeguards appropriate to their role.
5. Data retention
We retain merchant and order scheduling data while your shop has Date Pilot installed and for a reasonable period afterward to handle support, billing reconciliation, and legal requirements. When you uninstall the app, we delete or anonymize shop data in line with our data retention practices and Shopify’s requirements, except where we must retain information for legal compliance.
6. Your rights
Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal information. Merchants can contact us at support@datepilot.orbitly.com.
End-customer requests related to orders placed on a merchant’s store should generally be directed to that merchant. Where required, we assist merchants in responding to privacy requests under applicable law, including Shopify’s GDPR webhooks and data request workflows.
7. Security
We use industry-standard measures to protect data, including encrypted connections (HTTPS), access controls, and restricted service credentials. No method of transmission or storage is 100% secure, but we work to maintain appropriate safeguards.
8. International transfers
Date Pilot is operated from Canada. If you access the service from other regions, your information may be processed in Canada or in countries where our service providers operate, subject to applicable data protection laws.
9. Children
Date Pilot is a business application for Shopify merchants and is not directed to children under 16.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date above.
11. Contact
Questions about this Privacy Policy or our data practices: