MxAddress Privacy Policy
Effective September 19, 2026
In short: MxAddress requests no Shopify data access scopes at all. It cannot read your customers, orders, or products. The address a shopper selects is held in that shopper's own browser and submitted straight to Shopify checkout — it is never sent to or stored on our servers.
1. What MxAddress does
MxAddress adds a Mexican postal code and colonia (neighbourhood) search to the cart page of a Shopify store — Shopify checkout has no colonia field on its own. A shopper types their postal code, picks their colonia from a local catalogue, and MxAddress prefills the matching Shopify checkout fields so they don't have to retype them. It is installed as a theme app extension and runs in the shopper's browser. MxAddress is an independent app and is not affiliated with, endorsed by, or sponsored by Correos de México.
2. Information we collect from merchants
When a merchant installs MxAddress, we store:
- Store domain — the myshopify.com domain of the installing store.
- Shopify access token — issued by Shopify during installation and encrypted at rest with AES-256-GCM. Used only to identify the store and operate billing.
- Widget on/off setting — whether the widget is enabled. Every other setting (visibility, fields shown, button label and colour) lives in the theme editor, not on our servers.
- Subscription status — the identifier and state of your Shopify app subscription, synced from Shopify's billing webhooks.
- Aggregate usage counts — a daily tally per store of six event types (widget shown, postcode found/not found, colonia selected, checkout prefilled, catalogue load error). These are counters only — no address, name, phone number, order, or shopper identifier of any kind, and none can be traced to an individual shopper.
- Authentication session records — created by Shopify's official app library. MxAddress uses offline access tokens only, so these records do not carry staff names or email addresses.
3. Information we do not collect
MxAddress requests no Shopify access scopes. It has no permission to read or write your customers, orders, products, inventory, or any other store data, and makes no Shopify Admin API calls to retrieve them. We hold no shopper personal information on our servers at any time.
4. How shopper addresses are handled
The address a shopper picks is personal information, and it is handled entirely within their own browser:
- It is saved in that browser's sessionStorage and localStorage for up to 4 hours, so the shopper does not lose it while moving between the cart and checkout.
- It is passed to Shopify checkout as prefilled shipping fields. From that point Shopify — and the merchant, through their order — is the controller of that data, under Shopify's and the merchant's own privacy policies.
- It is erased from the browser once the order is placed, or after 4 hours, or if the shopper clears it manually.
- It is never transmitted to MxAddress servers and never written to our database.
5. Third-party services
The postal code and colonia data comes from SEPOMEX's Catálogo Nacional de Códigos Postales, published by Correos de México under an open-use licence. Unlike a live search service, this catalogue is bundled as static data served from Shopify's own CDN alongside the rest of the theme extension — a shopper's postal code search never reaches Correos de México, or any other third-party server; it is looked up entirely in the shopper's own browser.
Our application servers are operated by us on cloud infrastructure. We do not sell, rent, or share merchant data with advertisers, data brokers, or any other third party.
6. Mexican data-protection law
Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP) gives individuals rights over their personal data — commonly summarised as the ARCO rights: access, rectification, cancellation, and opposition. Because MxAddress does not collect or store shopper personal data on its own servers (section 4), there is no shopper data held by us to exercise those rights against. For personal data a merchant collects through their own store and orders — including any address a shopper submits at checkout — the merchant is the data controller (responsable) under Mexican law, not MxAddress. A merchant should ensure their own store's privacy notice covers that data, and should consult their own legal counsel for advice specific to their business.
7. Retention and deletion
We retain the merchant data in section 2 for as long as the app is installed. When you uninstall, Shopify notifies us and we mark the installation inactive.
We implement Shopify's mandatory compliance webhooks:
- customers/data_request and customers/redact — we confirm that we hold no shopper personal data, because we never collect any.
- shop/redact — sent by Shopify 48 hours after uninstall. We permanently delete the store record and everything attached to it, including settings and all usage counters.
A merchant may also request deletion at any time by contacting us.
8. Security
- All traffic is served over HTTPS with TLS.
- Shopify access tokens are encrypted at rest using AES-256-GCM.
- Requests from the storefront to our servers are verified against Shopify's app proxy signature before they are processed.
- We minimise risk by collecting no shopper personal data in the first place.
9. Your rights
Depending on where you are located, you may have the right to access, correct, export, or delete the information we hold about your store, and to object to or restrict its processing. Contact us and we will respond within the period required by applicable law.
10. Changes to this policy
We may update this policy as the app changes. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated to installed merchants.
11. Contact
Questions about this policy or about your data: devbiz654@gmail.com