# Privacy policy This policy describes what Agntwrk Store Locator collects from Shopify stores and from the shoppers who use a store's locator, why, and how to have it removed. Agntwrk Store Locator is operated by Agentic Labs LLC (agntwrk). Last updated 2026-10-18. ## What we collect from stores When you install the app we store your store's domain, the access scopes granted, the app plan and billing interval, and an offline access token for the Shopify Admin API. We store the locations you show on your locator: name, address, coordinates, time zone, phone number, website, email address, opening hours, tags, type, description, and which products each location carries. They come from your Shopify locations, from your wholesale customers' company locations (when you turn wholesale sync on), from CSV files, from the admin, or from the API. We also store the locator settings you choose (appearance, labels, filters, and, if you add one, your Google Maps API key), the rows of CSV files you import (kept for 7 days, with the counts and errors of the import), and the API keys you create (stored as hashes). Opening the app in your Shopify admin sets a first-party cookie named session that holds your store's domain, is signed and HTTP-only, and lasts 30 days. Standard server logs record the IP address, user agent, and request path of requests to our servers and are kept for up to 365 days. We do not sell personal data and do not use it for advertising. ## Wholesale retailers and protected customer data If you turn on wholesale sync (Growth and Pro), the app asks for access to your companies and orders. For each company location we read its name, its company's name, its shipping and billing address, its phone number, its number of orders, and the date and product ids of its recent orders. We use them only to show the brand's wholesale retailers on its store locator, to hide a retailer that has stopped ordering, and to list the products a retailer carries. We do not read or store customer names or email addresses, and wholesale sync stays off until you enable it. ## What we collect from shoppers When a shopper searches your locator, we record one event: the time, the kind of search, the area searched (a postal code or a city and region, never free text), coordinates rounded to two decimals, the radius, the number of results, the nearest distance, the product when the search came from a product page, and, for a click on directions, phone, website, or a store page, which location. We store no IP address, no customer id, no cookie, and no free text. Search events are deleted after 35 days. Daily totals made from them (searches, searches with no result, top areas, and clicks per location) are kept for 400 days so you can see trends. When a shopper taps Use my location, the browser sends its coordinates to our server for that search and they are not stored beyond the rounded values above. A shopper's search words that are not a postal code or a known city, such as a street address, are sent to Geoapify to find the place, and the answer is cached without any shopper identity. ## How we use it To show your locator and store pages, answer searches, keep your locations current, geocode addresses, count searches and clicks for your Insights page, enforce your plan's limits, bill the plan you chose through Shopify, and secure the service. We use store data only to provide the app to that store. ## Service providers We host the app on Google Cloud in the United States (us-central1): Cloud Run runs the app and its scheduled jobs, Firestore and Cloud Storage hold the data above, Secret Manager holds our credentials, Cloud Scheduler starts the jobs, and Cloud Logging keeps the logs. Geoapify geocodes the addresses of your locations and the occasional shopper search described above; it receives the address or search text. Shopify handles installation and billing, and we do not collect payment card details. Google Analytics counts visits to our web pages, as described below. These providers process data only to run the app. ## Maps The storefront map is drawn in the shopper's browser with MapLibre using map tiles from OpenFreeMap (openfreemap.org), which runs without keys or cookies. The shopper's browser requests the tiles directly from OpenFreeMap, so OpenFreeMap sees the shopper's IP address as any web server would. If you paste your own Google Maps API key on a paid plan, the locator loads Google Maps instead, under Google's terms and privacy policy. The list shows without any map request. ## Credits Map data (c) OpenStreetMap contributors, available under the Open Database License. Map tiles by OpenFreeMap and OpenMapTiles. Postal code and city lookups use data from GeoNames (geonames.org), licensed under Creative Commons Attribution 4.0; GeoNames data for Great Britain contains Royal Mail data (c) Royal Mail copyright and database right. Addresses are geocoded with Geoapify, using data from OpenStreetMap contributors and other open sources. ## Analytics The pages the app serves outside your Shopify admin, such as the home page and this policy, use Google Analytics 4 to count visits. It sets cookies in your browser, and Google Analytics does not log or store IP addresses. The app inside your Shopify admin and your storefront locator do not use analytics. ## Retention and deletion We keep store data while the app is installed. Uninstalling the app deletes the store's record and everything stored under it (locations, settings, imports, search events, daily totals, API keys, and sessions including its access token), and Shopify's shop data erasure request, sent 48 hours after uninstall, runs the same deletion again. Imported CSV rows expire after 7 days, search events after 35 days, and the geocoding results we cache carry no store identity. Logs are kept for up to 365 days. Write to us to have anything removed sooner. ## Your store's customers The app does not collect your customers' personal data. Wholesale sync reads company locations and order dates, not customer names or email addresses, and storefront searches carry no customer identifier. Customer data requests and customer erasure requests from Shopify are acknowledged with nothing to return or delete. Shoppers who want to see or delete their data should contact the store; we act on the requests Shopify forwards to us. ## Security Data is encrypted in transit and at rest. Access tokens and credentials are stored server-side and never sent to the browser, except the Google Maps key you add, which the storefront needs to draw a Google map and which should be restricted to your domains in Google's console. Access to production data is limited to the people who operate the app. ## Changes We update this page when the app's data handling changes and change the date above. ## Contact hello@agntwrk.com. Terms of use and our full privacy policy: https://agntwrk.com/legal