Privacy Policy
Last updated: August 23, 2026
1. Introduction
JizaiDev ("we", "us") provides the Shopify app "Shunji ni Hasso! for ClickPost" (the "App"). We treat the proper protection and handling of the information entrusted to us by our users (Shopify store operators) as a core responsibility.
This Privacy Policy explains what information the App collects, why we use it, and how long we keep it.
2. Information We Collect
The App accesses the following information through the Shopify API, and only to the extent required to perform its functions.
- Store and account information — — Store name, store URL, plan details and similar information needed to provide and authenticate the App.
- Shipping information — — The buyer’s name, postal code, address, phone number and order contents (used to generate the CSV file).
- Tracking status — — Tracking numbers and fulfillment status for an order (used to register tracking numbers and mark orders as shipped).
The App is built purely for shipping automation. It never accesses customer payment details (such as credit card numbers) or passwords.
3. Purposes of Use
- To generate and export a CSV file formatted for bulk registration with Japan Post’s ClickPost service.
- To extract tracking numbers from uploaded PDFs (shipping labels and similar). Extraction reads the text layer of the PDF on our own server; images are never sent to an external character-recognition service.
- To attach the extracted tracking numbers to the corresponding Shopify orders and mark them as fulfilled automatically.
- To improve the App, investigate and resolve faults (error logs and similar), and provide support.
4. How Long Data Is Kept
We do not retain buyers’ personal data (shipping address, name and so on) on an ongoing basis. Order details read from Shopify are used only for the duration of a given operation, such as generating a CSV or registering a tracking number.
A generated CSV file is stored temporarily on our server so that it can be downloaded. The download is single-use: the file is deleted the moment it is retrieved. If it is never downloaded, it becomes invalid 5 minutes after it was created and is removed during subsequent processing. While it is stored, the file contains the recipients’ names and addresses.
If you uninstall the App, the access token linking it to your store (the authenticated session) is deleted as well.
5. API Scopes and External Services
We also rely on the following external services.
Shopify — Reading and writing orders, products and fulfillments through the Admin API and webhooks.
Fly.io — Cloud infrastructure that hosts the App. The CSV described above is held temporarily on this infrastructure.
JizaiDev support platform (desk-api.jizai.dev) — Stores the content you send from the App’s “Feature request” and “Bug report” forms, together with any screenshots you attach. Nothing is sent unless you submit a form.
The App requests the following Shopify API scopes.
- read_orders / read_all_orders — Reading the orders and shipping addresses that the CSV is generated from.
- write_orders — Writing back to orders in order to mark them as processed.
- read_products / write_products — Reading product information and writing back shipping-related details.
- read_merchant_managed_fulfillment_orders / write_merchant_managed_fulfillment_orders — Registering tracking numbers and completing fulfillment.
We use no advertising networks, analytics services or character-recognition services. ClickPost registration works by having you upload the generated CSV to Japan Post yourself; we never transmit your data to Japan Post.
6. No Disclosure to Third Parties
We do not provide or disclose personal data or order information to third parties, except in the following narrowly limited circumstances.
- Where disclosure is required by law — a lawful order or inquiry from the police, a court, customs or another public authority.
- Where there is an urgent need to protect a person’s life, body or property.
We never use personal data for advertising, and we never sell or share marketing data with data brokers or third-party platforms.
7. Your Rights and Data Controls
As the store administrator you hold the following rights over the data the App processes, and you can exercise them through Shopify.
The App is registered for Shopify’s privacy webhooks covering GDPR and CCPA requests. Because it is designed not to retain buyers’ personal data on an ongoing basis, when a customer data or deletion request arrives (Customer Data Request / Customer Redact) there is no customer data held by us to disclose or erase. When a store deletion request (Shop Redact) arrives, we delete that store’s authenticated session.
8. International Transfers
The App runs on Fly.io’s cloud infrastructure, so depending on the operation your data may pass through or be stored on servers outside Japan — including the temporary CSV retention described above. In every case, traffic is encrypted with SSL/TLS.
9. Security
All data transmitted through the App is encrypted in transit using SSL (Secure Socket Layer) / TLS. Within our development team, system access is restricted to the small number of staff whose work requires it, such as for maintenance, in order to guard against unauthorised access and data breaches.
10. Changes to This Policy
We may update this Policy as we add features or as applicable law and the Shopify platform’s terms change. Where a change materially affects users, we will notify you in advance, for example through a notice inside the App.
11. Contact
For questions about this Privacy Policy or about how we handle data, and for support, please get in touch.
JizaiDev (developer and operator of the App)
Open the App in your Shopify admin and use the “Feature request” or “Bug report” link in the footer.