PickPoint Privacy Policy

Last updated: August 10, 2026

PickPoint ("the App," "we," "us") is a Shopify application published by Softify, Dr Cohen Heintz St., Holon, Israel ("Company"). The App adds a "pick up from a locker" delivery option to a merchant's checkout, powered by the Orian (CourierExpert) pickup point network in Israel. This policy explains what data the App accesses, stores, and why.

What data we access

When a shopper selects locker pickup at checkout, the App:

• Reads pickup point locations from data we cache from Orian (public location information about the pickup points themselves — name, address, city, opening hours — not information about any individual).
• Writes the shopper's chosen pickup point into the order's shipping address fields, using Shopify's own checkout APIs, so the order can be fulfilled to that location.
• Adds an order attribute recording which pickup point and provider were used, for fulfillment and support purposes.

We do not send a shopper's personal information (name, address, email, or phone number) to Orian or to any other third party. Orian only supplies the App with public pickup point location data — never information tied to a specific shopper or order.

What we store

The App's own servers and database store only the following, on a per-merchant basis:

• Store configuration you set in the App: your chosen shipping method name, free-shipping pricing threshold, locker provider, and how address fields are displayed at checkout.
• Your API credentials for your locker provider (Orian), encrypted at rest, used only to fetch pickup point locations on your behalf.
• A cache of pickup point location data (public information from Orian), refreshed roughly every hour.

We do not store your customers' names, addresses, email addresses, or phone numbers in our own database. That information lives in your store's order data on Shopify, governed by your own store's privacy practices and Shopify's data policies.

How we use this data

We use the data described above solely to operate the App's core functionality: showing accurate pickup point options at checkout, applying the pricing rules you configure, and (optionally) tagging orders that used locker pickup. We do not use this data for advertising, marketing, or analytics, and we do not sell or share it with third parties beyond what is described in this policy.

Data retention

Store configuration and encrypted credentials are retained for as long as the App is installed on your store. When you uninstall the App, this data — including your locker provider credentials and cached pickup point data — is automatically deleted from our systems. Cached pickup point data does not identify any individual and is refreshed hourly while the App is installed.

Security

• Locker provider API credentials are encrypted at rest (AES-256-GCM) and are never stored or transmitted in plain text.
• All communication between the App, Shopify, and the locker provider happens over encrypted (HTTPS) connections.

Your rights

If you are a merchant using PickPoint and want your store's configuration and credentials deleted from our systems, or if you are a shopper with a question about data written to an order you placed, contact us at support@softify.co.il and we will respond within 5 business days.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Softify
Dr Cohen Heintz St., Holon, Israel
support@softify.co.il