Privacy Policy — Dispatch Hours
This policy explains how JBV Labs (“we”, “us”, “our”) collects, uses, and stores information when you use Dispatch Hours, a Shopify app.
JBV Labs is established in the United Kingdom.
Legal entity: JBV Labs
Registered address: Office A13, Champions Business Park, Arrowe Brook Rd, Birkenhead, Wirral CH49 0AB, United Kingdom
Contact: privacy@jbvlabs.com
This policy covers the Dispatch Hours Shopify app.
1. Summary
Dispatch Hours hides named shipping methods at checkout after a dispatch cutoff, on weekends, on public holidays, and on manual dates you choose. An optional storefront banner can show the same cutoff.
We do not collect customer, order, or buyer personal data. We do not use the app for advertising, profiling, or selling data.
The only records we keep on our servers are Shopify OAuth sessions needed to keep the app installed and signed in. Your settings live in your Shopify store, not in our database.
2. Information we collect through Shopify’s APIs
When you install and use the app, we use Shopify Admin APIs with these scopes: read_shipping, read_markets, read_delivery_customizations, and write_delivery_customizations.
We read:
- Shop identifier and
.myshopify.comdomain - Shop timezone
- Shop country (to suggest a public-holiday calendar on first setup)
- Delivery customizations (so we can find or create the Dispatch Hours customization)
- Shipping zone or market names and shipping method names (so you can tick which methods to hide)
We write:
- A delivery customization titled “Dispatch Hours”
- App-owned metafields with your settings (cutoff time, method names, weekend flags, holiday calendar, manual dates, on/off, onboarding state)
Those metafields are stored on your Shopify shop. One copy is used by the checkout Function; another is readable on the storefront so the optional banner can show the cutoff.
The checkout Function runs on Shopify. At checkout it only sees shop local date/time and delivery option titles, handles, and method types. It does not request customer name, email, phone, address, or order contents.
We do not request protected customer data.
3. Information we collect from merchants
You do not create an account with us. You install through Shopify.
Settings you enter in the app (cutoff, method names, closed dates, and so on) are saved to Shopify metafields as above. We do not copy them into our own database.
OAuth session. To keep the app connected we store a session record on our server, including:
- Shop domain
- Access token and related auth fields (scopes, expiry, refresh token if Shopify issues one)
- If Shopify provides them during authentication: the installing or logged-in staff user’s Shopify user id, name, email, locale, and account flags (account owner, collaborator, email verified)
We do not ask you for a separate email, phone number, password, or information about your customers.
Operational logs. Our host may log HTTP requests to the app (including IP address, timestamp, and URL). We also log webhook topic and shop domain when Shopify sends uninstall, scopes-update, or compliance webhooks. We use this to run and debug the app, not to profile you.
Payments. If you subscribe, Shopify Billing collects and processes payment. We do not see or store card numbers.
4. Information we collect from merchants’ customers
We do not collect personal data from your customers.
The optional storefront banner runs a small script in the customer’s browser to keep the cutoff message in sync. It requests the current banner settings through Shopify’s app proxy (shop domain only — no customer personal data). It does not set cookies and does not use analytics or advertising pixels.
We do not log how customers browse a store.
5. Cookies and similar technologies
Dispatch Hours is an embedded Shopify admin app. Sign-in uses Shopify session tokens. We do not use advertising cookies, third-party analytics, or cross-site tracking.
Our host and Shopify may set cookies that are strictly necessary for security and authentication.
6. How we use this information
We use it only to:
- Install, authenticate, and run the app
- Read shipping method names and save your settings to Shopify
- Hide or show the shipping methods you chose, using Shopify’s delivery customization Function
- Show the optional storefront cutoff banner
- Respond to Shopify uninstall and compliance webhooks
- Diagnose faults
We do not use this information for marketing, advertising, resale, or any purpose other than providing the app.
7. How long we keep it
| Data | Where | Retention |
|---|---|---|
| App settings | Shopify metafields on your shop | Until you change them, uninstall, or Shopify deletes shop data |
| OAuth session | Our server (SQLite database on our host) | Until you uninstall, or Shopify sends a shop-redact request |
| Request / webhook logs | Our host’s logs | Only as long as the host retains logs for operations and security |
8. Where information is stored
JBV Labs is in the United Kingdom.
- Your settings are stored by Shopify on Shopify’s infrastructure.
- OAuth sessions are stored on the app server hosted by Render in its Frankfurt, Germany region (European Economic Area).
- Checkout Function and theme extension run on Shopify’s infrastructure, not on our server.
Shopify may process data in the UK, EEA, Canada, the United States, and other countries where it operates. Render is a US company; although our server and database are in Frankfurt, Render may access data from outside the EEA for support and operations. We use both only to provide the app.
9. Who we share information with
We do not sell personal data.
We use:
- Shopify Inc. and its affiliates — platform, APIs, metafields, Functions, theme extensions, App Store, and billing
- Render — hosting the app server, database file, and server logs
They act as processors / service providers for those purposes. They have their own privacy policies.
We may disclose information if required by law, or to protect the app and our users.
10. Shopify compliance webhooks
Dispatch Hours responds to Shopify’s mandatory compliance webhooks:
- customers/data_request — we do not store customer data, so there is nothing to return
- customers/redact — we do not store customer data, so there is nothing to delete
- shop/redact — we delete any remaining session records for that shop
11. Your rights
If you are in the UK or EEA (and in other places with similar laws), you may have the right to access, correct, delete, or restrict personal data we hold, and to object to certain processing, or to data portability.
The personal data we hold is limited to session records and operational logs. To exercise these rights, email privacy@jbvlabs.com. We may need to confirm the shop involved.
You can also uninstall the app at any time from Shopify admin, which deletes our session for that shop.
UK complaints: Information Commissioner’s Office. EEA: your local supervisory authority.
12. Children
Dispatch Hours is for Shopify merchants. It is not directed at children, and we do not knowingly collect children’s data.
13. Changes
We will update this page if our practices change and will revise the date above. Material changes will be reflected here before they apply.
14. Contact
Questions about this policy or Dispatch Hours:
JBV Labs
privacy@jbvlabs.com
Office A13, Champions Business Park, Arrowe Brook Rd, Birkenhead, Wirral CH49 0AB, United Kingdom