DoorPin Terms of Service and Data Processing Addendum

Last updated: October 8, 2026

These terms are between MoeZee Shop (“we,” “us”) and the merchant who installs DoorPin (“you”). By installing DoorPin you agree to them. Our Privacy Policy explains what data DoorPin handles.

Part 1 — Terms of Service

1. The service

DoorPin adds a block to your Shopify Thank You page. It asks the customer to share their delivery location (device GPS or a manually placed map pin) and stores that location on the customer's order so your courier can find them.

2. Your responsibilities

• You are responsible for telling your customers, in your own privacy policy, that you collect their delivery location and why. DoorPin only collects a location when the customer actively chooses to share it.
• Use the location only to deliver the order. Don't sell it, share it for advertising, or keep it longer than you need it.
• Keep your Shopify store and staff accounts secure, and follow Shopify's terms and the laws that apply to your business.

3. Fees

DoorPin offers a free plan with limited features and a paid plan that starts with a free trial period. The current plans, their limits, and prices are shown on the DoorPin listing in the Shopify App Store. Paid plans are billed through Shopify, and you can cancel by uninstalling the app.

4. Availability and support

We work to keep DoorPin available but don't guarantee uninterrupted service. If DoorPin is unavailable, your checkout and Thank You page keep working; only the location block is affected. Support: support@moezeeshop.com.

5. Warranty and liability

DoorPin is provided “as is.” To the extent the law allows, we are not liable for indirect or consequential losses (such as lost sales or failed deliveries), and our total liability is limited to the greater of the fees you paid us in the 12 months before the claim and USD 100.

6. Ending the agreement

You can stop at any time by uninstalling DoorPin. We may suspend the service if you break these terms. Section 6 of the Data Processing Addendum explains what happens to data when the agreement ends.

7. Changes and governing law

We may update these terms; material changes will be communicated to installed merchants. These terms are governed by the laws of the Arab Republic of Egypt, and the competent courts of Egypt.

Part 2 — Data Processing Addendum

This addendum applies to the personal data of your customers that DoorPin processes for you, under the data protection law that applies to you (for example the GDPR or Egypt's Personal Data Protection Law). You are the controller (you decide why the data is collected); we are the processor (we process it only on your behalf and instructions).

1. What we process

• Purpose: collecting and storing a customer's delivery location on their order.
• Data: latitude, longitude, capture time, capture method (GPS or manual pin), and the order identifier it belongs to.
• People: your customers who choose to share a location.
• Where it lives: as metafields on the order inside your Shopify store. DoorPin's own database stores no customer data, only the app's login session for your store (access tokens are encrypted).

2. Our commitments

• We process the data only to provide DoorPin, following your instructions as expressed by your use of the app.
• Everyone who can access the data at our end is bound by confidentiality.
• On paid plans, courier links (read-only, one order, expire after 7 days, no customer name or contact details) and CSV exports are generated only when you ask for them; you decide who receives them and you are responsible for sharing them only with people who need them to deliver the order.
• We collect only what is listed above, and we don't sell it or use it for our own purposes.

3. Security

• All traffic uses HTTPS/TLS.
• Location links are signed, expire after 30 minutes, and are tied to one order.
• The public endpoints validate input and are rate limited.
• Stored Shopify access tokens are encrypted (AES-256-GCM); the encryption key is kept separately from the database.
• Hosting providers encrypt data at rest at the storage layer.

4. Sub-processors

• Shopify — stores the order and its location metafields.
• Railway — hosts the DoorPin application (processes location submissions in transit).
• Neon — hosts DoorPin's database (login sessions only).

Map assets for the manual pin (Leaflet from cdnjs and map tiles from OpenStreetMap) are loaded by the customer's browser and don't receive the submitted coordinates. Our hosting is in the United States; contact us for transfer safeguards. We will tell you before adding a sub-processor that handles customer data.

5. Customer requests and deletion

• We automatically delete the location metafields from orders older than 30 days.
• We act on Shopify's customers/redact and shop/redact requests, deleting the location metafields and our stored session data.
• For customers/data_request, DoorPin holds no separate copy; the location is on your own order, which you can export from Shopify. We confirm on request which orders carry a location.
• We will help you answer other requests from your customers about this data when you contact us.

6. When the agreement ends

When you uninstall DoorPin we delete our session data for your store immediately. Location metafields already written to your orders stay in your store under your control until you delete them (or until the 30-day cleanup removes them if DoorPin is still installed).

7. Incidents and audits

If we learn of a security incident affecting your customers' personal data, we will notify you without undue delay. On reasonable request we will give you the information needed to show we follow this addendum.

Questions: support@moezeeshop.com