Voodoo Privacy Policy

Privacy Policy

Voodoo — Delivery Estimates · Last updated: September 27, 2026

Voodoo ("we", "our", or "the app") provides delivery-date estimates for Shopify merchants. This policy explains what data we collect, why we collect it, and your rights. If you have questions, contact us using the details at the bottom of this page.

1. Data we collect from merchants

When you install Voodoo, we receive standard store information through the Shopify API, including:

Shop name, domain, email address, and timezone
Product, collection, and variant data needed to apply your delivery rules
Order data used to send customer delivery-date notification emails
Your delivery configuration: cutoff times, prep/handling time, working days, warehouse locations, and per-product / per-collection / per-country rules

We only request the API scopes required for these features, and we never access data beyond what the app needs to function.

2. Data we collect from shoppers

On the Pro and Business plans only, when a shopper views a product, cart, or collection page showing a Voodoo estimate widget, the widget sends the shopper's public IP address to our servers for a one-time approximate-location lookup (city/region level — never GPS-precise). This lets the estimate account for the distance between your warehouse and the shopper.

No precise location is ever collected. Browser geolocation (the permission popup) is used only if the shopper explicitly grants it, and only to refine the estimate.
IP-derived locations are cached for up to 24 hours for performance, then discarded.
Shoppers on stores using the Free or Starter plan never trigger an IP lookup — those plans show standard, non-distance-adjusted estimates.
The IP lookup is performed by ip-api.com under their own privacy policy; only the IP address is sent.

3. How we use the data

To compute and display delivery-date estimates on your storefront
To send delivery-date notification emails to your customers after purchase
To power in-app analytics (estimate views and their relationship to buying behavior)
To provide customer support and improve the app

We do not sell personal data. We do not share personal data with third parties for advertising. We do not use shopper data for any purpose other than providing the estimate feature.

4. Data retention

Merchant configuration and app data are retained while the app is installed, and deleted within 30 days of uninstall.
Shopper IP-derived locations are cached for a maximum of 24 hours, then discarded.
Analytics aggregates contain no personally identifiable shopper information.

5. Your controls

Merchants: you can disable distance-aware estimates entirely by leaving the warehouse latitude/longitude blank in Settings. Uninstalling the app stops all data collection; stored data is deleted within 30 days.
Shoppers: estimates work without location sharing — shoppers who prefer not to share their IP simply see standard (non-distance-adjusted) estimates.

6. Security

Data is transmitted over encrypted HTTPS connections and stored on secure infrastructure. Access is limited to what is required to operate and support the app.

7. Changes to this policy

We may update this policy as the app evolves. The "last updated" date at the top will always reflect the current version, and material changes will be noted in the app.