Privacy Policy
for the Dingio - Telegram Order Alerts Shopify app
Last updated: 9 August 2026
This privacy policy explains how the Shopify app Dingio - Telegram Order Alerts ("the App"), operated by EpicPilot Labs ("we", "us"), handles information when you install and use it on your Shopify store.
In short: the App sends you a Telegram message when an order is placed or cancelled, or when stock runs low. It does not collect or store your customers' personal data - no names, email addresses, phone numbers, or shipping addresses are ever stored by us or included in your alerts.
1. Who we are
The App is developed and operated by EpicPilot Labs, based in Lithuania (European Union). EpicPilot Labs is the data controller for the information described in this policy.
For any question or request relating to this policy or your data, contact dingio@epicpilotlabs.com. We aim to respond within two business days. Additional registration or contact details can be provided on request.
2. Information we receive through Shopify's APIs
When you install the App, Shopify grants it permission to read certain information about your store. The App subscribes to notifications ("webhooks") for events you choose to be alerted about.
What we receive
When one of your chosen events occurs, Shopify sends the App a notification containing information about that event. From it, the App uses only:
- the order number;
- the order total and currency;
- the number of items in the order;
- for stock alerts: the product or variant name and the remaining quantity;
- your store's name and
myshopify.comdomain.
What we do not use or store
Shopify's order notifications may technically contain personal data about your customers. The App deliberately ignores this. We do not use, store, or transmit:
- customer names;
- customer email addresses or phone numbers;
- shipping or billing addresses;
- payment details;
- any other customer-identifying information.
None of this information appears in your Telegram alerts, and none of it is written to our database. Event data is processed in memory only, for the moment it takes to compose your alert, and is then discarded.
3. Information we collect directly from you (the merchant)
To make the App work, we store the following in our database:
| What | Why |
|---|---|
| Your Telegram bot token | So the App can send messages through the Telegram bot you created. Stored so alerts continue to work without you re-entering it. |
| Your Telegram chat ID | To know which chat or group should receive your alerts. |
| Your store name and domain | To identify your store in your alerts and to associate your settings with your store. |
| Your alert preferences | Which alerts you enabled and your low-stock threshold. |
| Shopify session data | The access token Shopify issues so the App can operate on your store. Managed by Shopify's standard app libraries. |
| Support messages | If you contact us by email or Telegram, we receive your address or username and the message you send, so we can reply. |
All of this relates to you and your store - not to your customers.
4. Do we ask for information about your customers?
No. The App does not request, use, or retain personal data about your customers or your store's visitors. We have not requested access to Shopify's protected customer data fields (name, email, phone, address).
5. How your information is used
We use the information described above solely to:
- deliver the alerts you have enabled to the Telegram chat you connected;
- remember your settings between visits;
- respond to your support requests;
- diagnose technical errors and keep the App running reliably.
We do not sell, rent, or share your information for advertising or marketing. We do not use it for automated decision-making or profiling.
6. Where your information is stored
The App runs on servers located in Frankfurt, Germany (European Union), and its database is hosted in the European Union. Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting providers.
6a. Our websites
This policy covers the App. Our websites (epicpilotlabs.com) use Cloudflare Web Analytics to count page views. It sets no cookies, does not fingerprint visitors, and does not track anyone across sites. Nothing on our websites asks you for personal data.
7. Service providers
We rely on the following providers to operate the App. Each processes only what is necessary for its function:
- Fly.io - application hosting (Frankfurt, EU).
- Neon - database hosting (EU region).
- Telegram - delivery of your alert messages to the chat you chose. Message content is limited to the fields listed in section 2.
- Shopify - the platform the App is installed on, which provides the event notifications.
- Cloudflare - website hosting and cookieless page view analytics for our public websites. Not used by the App itself.
8. How long we keep information
- Order and stock event data: not stored at all - processed in memory and discarded immediately after your alert is sent.
- Your settings (bot token, chat ID, preferences, store name): kept while the App is installed.
- After uninstall: Shopify notifies us when you uninstall the App, and again approximately 48 hours later. On receiving these notifications we delete all data associated with your store - settings, tokens, chat ID, and session records. Nothing is retained.
- Support messages: kept in our support inbox for as long as needed to handle your request and any follow-up.
9. Data protection requests
The App supports Shopify's mandatory privacy webhooks:
customers/data_request- as we hold no customer personal data, there is nothing to provide.customers/redact- as we hold no customer personal data, there is nothing to delete.shop/redact- all data for your store is deleted.
If you would like a copy of the data we hold about your store, or want it deleted before uninstalling, email dingio@epicpilotlabs.com and we will action it.
10. Your rights
Depending on where you are located (for example, under the GDPR in the EU/EEA or the UK, or the CCPA in California), you may have rights to access, correct, delete, or export the personal data we hold about you, and to object to or restrict its processing. Since the data we hold relates to your store account, you can exercise most of these rights directly - by changing your settings in the App, or by uninstalling it, which triggers deletion. For anything else, contact dingio@epicpilotlabs.com.
If you are in the EU/EEA and believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.
11. Security
Your Telegram bot token is stored in our database and is never displayed back to you or exposed to your browser after saving. All connections between Shopify, the App, and Telegram use encrypted HTTPS/TLS. Incoming notifications from Shopify are cryptographically verified before being processed. Access to our production systems is restricted to the App's operator.
Please note that the alerts themselves are delivered through Telegram and are subject to Telegram's own privacy practices and to the security of the chat or group you connect. You control which chat receives them, and you can change or disconnect it at any time in the App.
12. Children
The App is a business tool intended for Shopify merchants and is not directed at children.
13. Changes to this policy
We may update this policy as the App evolves or as legal requirements change. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to merchants where appropriate.
14. Contact
Questions, requests, or concerns about privacy:
EpicPilot Labs
Lithuania, European Union
Telegram: @EpicPilotLabs
Email: dingio@epicpilotlabs.com
Further registration details are available on request.