Privacy Policy
xqpod Privacy Policy
This Privacy Policy explains how xqpod, a Shopify app operated by Xiqi Dingsheng (西启鼎盛), collects, uses, discloses, stores, and protects information when merchants install or use the app.
1. Who We Are
xqpod is operated by Xiqi Dingsheng (西启鼎盛), a company registered in China. In this policy, "xqpod," "we," "us," and "our" refer to the operator of the xqpod Shopify app and related print-on-demand services.
This policy applies to the Shopify app, the embedded merchant interface, Shopify app blocks or theme integrations, and backend services that support product synchronization, order synchronization, customization, production, and fulfillment workflows.
2. Information We Collect
We collect only the information reasonably needed to install, authenticate, operate, support, secure, and improve xqpod.
Shopify store domain, Shopify app installation status, app authorization scopes, Shopify access tokens, app configuration, default language, theme configuration status, linked xqpod account, company/account status, and merchant contact details that a merchant provides when binding an xqpod account.
Product IDs, product titles, handles, product options, variants, SKUs, inventory-related fields, product images, template data, custom product configuration, custom field names and values, and files or images uploaded or synchronized for print-on-demand products.
Shopify order IDs and names, order timestamps, order status, payment/fulfillment status, currency, total price, order notes, custom attributes, line items, quantities, product and variant IDs, fulfillment order data, tracking data, and shipping details such as recipient name, company, phone number, country, province/state, city, postal code, and street address.
Shopify App Bridge identity tokens, OAuth verification data, IP-derived request metadata, error logs, operational logs, captcha/session data used for account binding, and support information provided by merchants.
The embedded app may store a language preference in the merchant browser using local storage. We do not use this preference for cross-site advertising.
3. Shopify Permissions Used by the App
Depending on the features used, xqpod may request Shopify permissions that allow it to read or write products, inventory, markets, publications, customers, files, orders, merchant-managed fulfillment orders, fulfillments, and online store themes.
These permissions are used to create and update POD products, publish products, read product variants, synchronize paid or partially refunded orders, create production orders, update fulfillment and tracking information, upload or reference product files, and help merchants enable product-page theme integrations.
4. How We Use Information
- Install, authenticate, and maintain the xqpod Shopify app.
- Bind a Shopify store to a merchant's xqpod account and company profile.
- Synchronize POD product templates, product images, options, variants, and SKUs to Shopify.
- Read Shopify order and line-item data to create production and fulfillment workflows.
- Use shipping recipient information to produce, pack, ship, and support customer orders.
- Write fulfillment status and tracking details back to Shopify when orders are shipped.
- Read and update Shopify theme files when merchants choose to enable app-block integrations.
- Provide merchant support, troubleshoot errors, enforce account permissions, prevent abuse, and maintain service security.
- Comply with legal, tax, accounting, regulatory, platform, and Shopify requirements.
5. How We Share Information
We do not sell personal information. We share information only as needed to provide and operate xqpod, comply with law, or protect the service.
- Shopify: We exchange data with Shopify through Shopify APIs, OAuth, App Bridge authentication, and Shopify webhooks.
- Production and fulfillment partners: Order and shipping details may be shared with production facilities, packing teams, and logistics providers so customer orders can be manufactured and shipped.
- Cloud infrastructure and storage providers: We may use hosting, database, object storage, CDN, queue, and backup providers, including Aliyun OSS/CDN where configured, to store and deliver app data and files.
- Error monitoring and operations providers: We may use service providers such as Sentry to detect and diagnose production errors. Sensitive request parameters are filtered where technically supported.
- Logistics integrations: If a merchant configures a logistics integration, such as YunExpress, we may send or receive order, waybill, label, and tracking information needed for that integration.
- Legal and safety disclosures: We may disclose information when required by law, legal process, Shopify policy, or to protect rights, security, users, or the integrity of the service.
6. Data Retention
We retain information for as long as it is reasonably necessary to provide xqpod, fulfill merchant and customer orders, maintain security, resolve disputes, support merchants, and meet legal, tax, accounting, regulatory, and Shopify platform obligations.
If a merchant uninstalls xqpod or requests deletion, we will restrict, delete, or anonymize data where required and where no longer needed for active production, fulfillment, dispute, accounting, legal, security, or compliance purposes. Backup, log, and archival copies may remain for a limited period before being overwritten or deleted according to our normal retention cycles.
7. International Processing
We are registered in China and may process and store information in China and in other countries or regions where Shopify, our infrastructure providers, logistics providers, production partners, and support providers operate. These locations may have data protection laws different from those in the merchant's or customer's country.
When information is transferred internationally, we use operational, contractual, and technical safeguards appropriate to the nature of the data and the services being provided.
8. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include Shopify OAuth and HMAC verification, Shopify App Bridge token authentication, access controls, request filtering, and operational monitoring.
No online service can guarantee absolute security. Merchants are responsible for protecting their Shopify admin access, xqpod account credentials, staff accounts, API keys, and logistics integration credentials.
9. Merchant and Customer Rights
Merchants may contact us to request access, correction, export, restriction, deletion, or other actions related to their information, subject to applicable law, identity verification, Shopify requirements, and legitimate retention needs.
Shopify customers should contact the merchant from whom they purchased products. When Shopify or a merchant sends us a valid data access or deletion request, we will review and process the request as required by Shopify policy and applicable law.
10. Cookies, Tracking, and Analytics
The xqpod embedded app uses Shopify authentication mechanisms and may store local browser preferences such as language. We do not use customer personal information collected through xqpod for cross-context behavioral advertising.
Shopify and the merchant's store may use their own cookies, pixels, analytics, or tracking technologies outside of xqpod. Those technologies are governed by Shopify's and the merchant's own policies.
11. Children's Information
xqpod is intended for merchants and business users. We do not knowingly collect personal information directly from children through the app.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our app, services, legal obligations, Shopify requirements, or business practices. The "Last updated" date above indicates when this policy was last revised.
13. Contact Us
Operator: Xiqi Dingsheng (西启鼎盛)
Country of registration: China
App: xqpod
Privacy contact: podqueendev@gmail.com