Privacy Policy — Jojocode Checkout
Last updated: 5 November 2026
Jojocode Checkout ("the app") is a Shopify app developed by Murat Zafer Karaaslan (Jojocode) that adds Turkish province / district / neighbourhood selection, legal agreement consent and checkout rules to Shopify stores. This policy explains what the app processes when a merchant installs it and when their customers check out. How we process customers' personal data on the merchant's behalf is set out in our Data Processing Agreement.
Information about merchants
- Store details from Shopify: shop domain, store name, store email, Shopify plan, primary language.
- Shopify access tokens and session data needed to call the Shopify Admin API on the store's behalf.
- Settings the merchant enters in the app: address and checkout-rule options, seller details shown in legal texts (company name, address, phone, email, tax and MERSİS numbers), region customisations and agreement texts with their version history.
- If a merchant submits the Shopify Plus enquiry form: the name, email address, phone number and message they enter, to contact them about the enquiry.
- Subscription status as reported by Shopify Billing.
- Daily counts of what the checkout blocks did in the store (for example, how many addresses were corrected), shown on the app's home page. They contain no buyer data or identifiers.
Information about customers (buyers)
The checkout blocks run inside Shopify's checkout, and the consent window runs on the store's own pages. The address a buyer selects and their agreement consent are written into Shopify's own cart, checkout and order records (address fields and an order attribute such as "Sozlesme Onayi"); the app does not copy or store them on its servers. Before an order is placed, agreement texts are filled with the buyer's details inside the buyer's browser for display only.
When an order is placed, Shopify sends it to the app. The app fills the agreements the buyer accepted with the order's details (buyer name, shipping and billing address, email, phone, products, totals and payment method) and saves these final texts on the order in Shopify, where the merchant and the buyer can read them. The order is processed in memory only for this; the app keeps no copy of it on its servers.
To show the neighbourhood list, the checkout requests it from the app's server with the shop domain, province and district name; these requests contain no personal data. When the store uses the app's address autocompletion, the text a buyer types into the address field is sent to the app's server to find matching neighbourhoods. It is used only to answer that request: it is not stored, not written to logs and not shared. The checkout blocks also report anonymous events (for example "an address was corrected") that are counted per store and day; they contain no personal data. Like any web server, ours records IP addresses in short-lived technical logs used for security and troubleshooting; error logs may contain a store's domain and an order number, but no buyer details.
How information is used
Only to provide the app's features, to bill through Shopify, to answer support and Plus enquiries, and to keep the service secure. The app does not sell or rent personal information and does not use it for advertising.
Sharing
- Shopify, which hosts the store, checkout and billing.
- Hostinger, which provides the servers the app runs on, in Frankfurt, Germany.
- Cloudflare, which stores the app's encrypted database backups.
Administrative division data comes from the public lists of the Republic of Türkiye Ministry of Interior.
Retention and deletion
When a store uninstalls the app, its sessions are deleted immediately. All remaining store data — settings, agreements and their versions, region customisations, usage counts and Plus enquiries — is deleted when Shopify sends the shop/redact request, 48 hours after uninstalling. Database backups are encrypted and kept for 30 days, so deleted data also leaves the backups within 30 days. When Shopify sends a customer erasure request, the app deletes the final agreement texts it saved on that customer's orders. The app keeps no customer records on its servers, so there is nothing else to return or erase.
Your rights
Merchants can request access to, correction of, or deletion of their data at any time by contacting us. Customers should contact the store they purchased from; we will assist the merchant with any request.