Privacy Policy

Pick a Day: Pickup & Delivery — Last updated: September 26, 2026

Pick a Day is a Shopify app that lets a shop take orders for a particular pickup or delivery day and time. Shoppers choose a day and a time slot on the cart page, and checkout asks for one before an order can be placed. This policy explains what data the app touches and how it handles it.

The permissions the app asks for

• write_validations — to create the checkout rule that asks for a pickup or delivery time, and to store that rule's settings.
• write_orders — to add a tag and a line to the note of an order that carries a chosen day and time, and to be told when an order is created, paid or cancelled. It includes permission to read orders; the app reads nothing from an order beyond the fields listed below.

What the app receives about orders

Shopify notifies the app when an order is created, paid or cancelled. Each notification is limited, at the app's request, to these fields and no others:

• id and admin_graphql_api_id — the order's number inside Shopify, so the app can tag the right order.
• note_attributes — the extra details attached to the order at the cart, where the chosen method, date and time slot are kept. If the shop uses other apps that also add details there, the app receives those too but reads only its own three.
• note — the order note, on new orders only, so the app can add the chosen day and time below anything already written there. The app does not store the note.

The app does not ask for, and does not receive, the customer's name, email address, phone number, shipping or billing address, the items ordered, or any amounts or payment details.

What the app stores

The merchant's settings. Which days the shop takes pickups or deliveries, the time slots on each day, prep time, the order cutoff, blackout dates and, on the Pro plan, how many orders each slot may take. These are stored as app-owned metafields on the merchant's own Shopify shop, and a copy of what checkout needs is stored on the checkout rule. They are business settings, not personal information about anybody.

A record of each paid order's time slot. To count how many orders a slot has taken, the app keeps one row per paid order that carried a chosen time: the order's number, the chosen date, the time slot, whether it is pickup or delivery, and whether the order was later cancelled. Nothing else — no name, contact detail, address or order contents. These rows are kept in this app's own database, on a server operated by Marquee Apps and hosted with DigitalOcean.

A session for the merchant's store. Shopify requires an installed app to hold a record identifying the store: the shop's .myshopify.com domain, the access token Shopify issued for it, a refresh token, and their expiry. It is stored in the same database and used only to act on the merchant's behalf as described here. It is issued to the store rather than to a person, so no staff member's name, email or login is stored with it.

An install record for Marquee Apps. The shop's .myshopify.com domain, when the app was installed and uninstalled, whether it is a development or Shopify review store, and the name and number of the store's current subscription to this app. It is kept in the same database and used only for the notices described below. It is about the store, not a person.

Notices to Marquee Apps, sent through Resend

When a store installs the app, subscribes, changes plan, cancels (or declines a charge, or lets one expire), or uninstalls, the app sends Marquee Apps a short email about it. These emails are sent through Resend (resend.com), our email provider, which delivers them on our behalf.

Each one contains the shop's .myshopify.com domain, the name, price and dates of the plan, the subscription number, and whether it is a test. It contains nothing about any person — no merchant or staff name, email address, or login — and nothing about shoppers or orders. The emails go only to Marquee Apps; the store receives nothing from them.

How stored data is protected

Encrypted at rest. In the app's database, the order's number, the chosen date, the time slot and the method of each order-slot record, and the store's access token and refresh token, are encrypted with AES-256-GCM before they are written. The app finds a record by a keyed hash of its order number or date, which cannot be turned back into either. What is not encrypted: the shop's .myshopify.com domain, which every record is filed under; whether an order was cancelled; when a record was created or changed; when a token expires; and the install record, which holds nothing personal or secret. The encryption key is kept outside the database, on the same server, readable only by the account the app runs as.

Encrypted in transit. Data travels between Shopify, the merchant's browser and the app only over HTTPS (TLS). A request that arrives over plain HTTP is redirected to HTTPS and not served, and the server accepts no other connections from outside apart from its own administration.

Logs. The server's request log records which page was requested and nothing after it in the address, and the app never writes an order's number, its chosen time, the order note or any token to a log. The web server also records each visit to the app's pages, including the visitor's IP address and browser. All of these logs are deleted after about two weeks.

Shoppers

The picker on the cart page runs in the shopper's browser and saves the chosen method, date and time slot to the shopper's own cart, through Shopify. It sends nothing to this app's servers, sets no cookies of its own, and stores nothing in the browser. The chosen day and time then travel with the order inside Shopify, where the merchant sees them.

The check that asks for a time runs inside Shopify at checkout. It is given the shop's settings, the three details the picker saved to the cart, and the shop's current date and a set of true-or-false answers to "is it before this time?" in the shop's time zone. It is not given anything about the person checking out or the contents of their cart.

The storefront check

To tell the merchant whether the picker is showing, the app loads the shop's public cart page, as any visitor could, and looks for the picker on it. That request carries no shopper's cart and collects nothing.

What the app does not do

• It does not use cookies, analytics or tracking scripts of its own.
• It does not sell or rent any data, and shares none with third parties apart from Resend, which delivers the notices described above.
• It does not build profiles of shoppers.
• It does not read customer or product data, and it does not collect or store payment details.

Data retention

The settings stay on the merchant's shop until they are changed or the app is uninstalled, when Shopify removes the app's metafields. The session record is deleted when the app is uninstalled. The order-slot records are deleted when Shopify sends the request to erase a shop's data, which it does 48 hours after uninstalling; while the app is installed they are kept so capacity counts stay correct, and records for past dates are no longer used for anything.

The install record is kept while the app is installed, marked with the date when it is uninstalled, and deleted when Shopify sends the request to erase the shop's data, 48 hours after the app is uninstalled.

Data requests

The app handles the three data-protection requests Shopify sends. A request for a customer's data returns any order-slot records for the orders named in it. A request to erase a customer's data deletes the order-slot records for those orders. A request to erase a shop's data deletes that shop's order-slot records, its session and its install record.

A merchant who wants to know what is held for their store, or wants it removed, can write to the address below.

The merchant's own privacy policy

This page covers only what this app does. The store you are buying from has its own privacy policy, which governs your visit and any order you place.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new "Last updated" date.

Contact

Questions about this policy or this app can be sent to Support@MarqueeApps.com.