Privacy Policy

Readyby · Last updated: October 6, 2026

This Privacy Policy explains how Dropfeed LLC ("Dropfeed," "we," "us") collects, uses, and protects information when you install and use Readyby (the "App") on your Shopify store. By installing the App, you agree to this policy.

1. Information we access

When you install Readyby, we access the following through the Shopify Admin API and related APIs, only as needed to provide the App:

Store & account details: your store name and domain, your store's time zone, and the store owner/primary contact email (for support and billing notices).
Product data: product titles and IDs, so you can set a lead time for a specific product and so the storefront picker can apply the right rule to what's in the cart.
Limited order data: when an order is placed, Shopify notifies us and we read only the attributes the App itself wrote, the ready-by date, the fulfillment method (pickup or delivery), and the time window, if you use slots. Those values reach the order as line item properties on the scheduled item, and as cart-level order attributes; we read both and nothing else. We use them to count that booking against the day's capacity and against your plan's monthly allowance.
Upcoming orders page: when you open it, the App reads your orders from the last 45 days live from Shopify: the order number, the items and quantities, the fulfillment status, and the same Readyby attributes described above, to show them to you grouped by date. Nothing from those orders is stored, and customer fields are never requested. The Print and Download CSV buttons work in your browser from what is already on the page.
Calendar link (only if you create one): the App stores one random code for your store. When a calendar app opens the link, the App reads the same order details as the Upcoming orders page (order number, items, quantities, fulfillment status and Readyby attributes) and returns them as a calendar. No customer names, emails, phone numbers or addresses are included. Those order details are held in memory for up to 10 minutes so a calendar app checking often does not repeat the request, and are not written to storage. You can replace the code or turn the link off at any time, and it is deleted when you uninstall.
Order tags and pickup locations (only if you turn them on): Readyby has permission to add tags to your orders and to see your store locations, but uses them only for these two features, and only after you tick them in Settings. With order tags on, when an order with a Readyby date arrives the App adds its own tags to that order (for example readyby, ready-2026-10-30, pickup); it never removes or changes your other tags and reads no customer details. With pickup locations, the App reads your store’s location names and cities to let you choose where pickup is offered, and stores the names and days you choose. Shoppers’ chosen location is saved on the order as “Pickup location”, like the date.
Shipping dates (only if you turn them on): a shopper who chooses shipping picks a ship date, or an arrival date. The ship date is saved on the order as “Ready by” like any other date, and an arrival date as “Estimated arrival”. Readyby reads these back from new orders the same way it reads the date, and reads no addresses or customer details for it.
Receipt printer (only if you connect one): to print a slip for a new order, the App reads the order number and each item's name and quantity, along with the Readyby details it already reads, and keeps the slip text until your printer has printed it, then for 7 days so you can reprint it, after which it is deleted. Your printer collects slips through print.dropfeed.io, a Dropfeed relay that passes them on and stores nothing. No customer details are read or printed.
Item counts: for each new order with a Readyby date, the App also reads which products were ordered and how many of each (product numbers and quantities only), so daily limits can count items, overall and per product. Nothing else about the order or the customer is read for it.
App usage & billing status: basic operational logs and your subscription plan/status (managed through Shopify).
Email updates contact (optional): if you add an email address in the Email updates box in the App, we store it, together with your store's name so emails can greet you by it. We never take an email address from your Shopify account. Leave the box empty and we store nothing.

We do not read, store, or transmit your customers' names, email addresses, phone numbers, shipping or billing addresses, or payment details. Those fields may be present in the order notification Shopify sends us, but the App does not access them and never writes them to our database. Readyby stores no customer personal data at all.

2. How we use information

To work out which pickup or delivery dates your store can genuinely offer, from your lead times, cutoff, open days, blackout dates and daily capacity.
To count how many orders a day has taken, so a day that reaches your cap stops being offered.
To count scheduled orders in the current month, so we can apply your plan's allowance.
To operate, secure, and support the App, and to administer billing.
If you gave us an email in the App: to tell you when your store nears or reaches its plan's monthly allowance, and occasionally about a major update. Every email has an unsubscribe link.

We do not use your data, or your customers' data, to train machine-learning models, and the App makes no automated decisions that have legal or similarly significant effects on any individual.

3. Protected customer data

Shopify classifies order data as protected customer data. In line with Shopify's requirements, we:

process only the minimum data needed to provide the App's scheduling and plan-limit functions;
tell you here what we process and why, and limit our processing to those stated purposes;
do not sell personal data, and do not share it for advertising, profiling, or analytics;
apply retention limits (see section 6) rather than keeping data indefinitely;
encrypt data in transit and at rest; and
make this policy, together with our Terms of Service, our data protection agreement with you. If your organization requires a separate signed data processing agreement, email us.

Because the App does not process customer names, addresses, phone numbers, or email addresses, we request only the minimum level of access Shopify offers for the order attributes described above.

4. Sub-processors

We rely on infrastructure sub-processors to run the service:

Fly.io: application hosting and database.
Shopify: platform, authentication, checkout, and billing.
Hostinger: email delivery, only if you add an email address in the App.

Readyby does not use any AI provider and does not send your data to advertising or analytics networks. These sub-processors process data only to provide their services to us, under their own terms and security commitments.

5. Data sharing

We do not sell your data. We share information only with the sub-processors above to operate the App, or where required by law.

6. Data retention and deletion

While the App is installed we store your schedule settings, per-product rules, blackout dates, per-day booking counts, and an aggregate count of scheduled orders for the current and recent months. None of that includes customer personal information.

When you uninstall the App or request deletion, we delete your store's associated data within 30 days, except where we must retain limited records for legal or accounting purposes.

We honor Shopify's mandatory compliance webhooks, customers/data_request, customers/redact, and shop/redact. Because the App stores no customer personal data, a customers/redact request has no personal data to remove; a shop/redact request deletes your store's settings, rules, blackout dates, booking counts, email updates contact, and sessions from our systems.

The email updates contact is deleted as soon as you uninstall, and its address is cleared the moment you click Unsubscribe in the App or unsubscribe from an email.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and at rest, access controls, and least-privilege API scopes, the App requests only read_products and read_orders. No method of transmission or storage is 100% secure, but we work to protect your information.

8. Your rights (GDPR, CCPA, and similar)

Depending on your location, you may have rights to access, correct, export, or delete your data, and to object to or restrict certain processing. To exercise these, email support@dropfeed.io and we will respond as required by law. We do not sell personal information.

9. International transfers

Your data may be processed in the United States and other countries where we or our sub-processors operate. We take steps to ensure appropriate safeguards for such transfers.

10. Children

The App is for business use and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "Last updated" date. Material changes will be communicated where appropriate.

12. Contact

Dropfeed LLC
Navarre, FL
Email: support@dropfeed.io

← Back to Dropfeed