Privacy and data
The app links each answer to a Shopify order ID. It does not keep your buyers’ personal details. Shopify keeps those.
What the app stores
- The Shopify order ID that each answer belongs to.
- The answers, with email addresses, phone numbers and introduced names removed from written answers.
- The order total, for revenue and AOV. Your store’s currency is stored once, for the whole store.
- The date and time of each answer.
What the app never asks for
- Buyers’ names, email addresses or phone numbers.
- Postal addresses.
- The products in an order.
The app does not ask Shopify for access to customer records. It asks to read and change orders only.
The app does not save IP addresses with answers. Our hosting provider, Cloudflare, keeps short technical logs of requests and errors for up to 7 days. These logs can include IP addresses and store domains.
A buyer can still type a personal detail into a written answer. The app removes what it can find (see below), but some names can stay.
Answers are not anonymous. Each answer links to an order, and you can see who placed that order in Shopify. Don’t tell buyers that the survey is anonymous.
Personal details are removed from written answers
Buyers sometimes type their name, email or phone number into an answer. The app replaces them before it saves the answer. This is always on.
| The buyer types | Love it! I’m Jane Park, email jane.park@mail.com or call 555-0142. |
| The app saves | Love it! I’m [name], email [email] or call [phone]. |
Emails and phone numbers are found by their pattern. A name is found when it starts with a capital letter and follows “I’m”, “I am”, “My name is”, “This is” or “Call me”, or when it ends the answer after a sign-off such as “Thanks,”, “Cheers,” or “Regards,”. Other names, and names typed in lower case, can stay in the text. That is why the help text under each text box asks buyers not to include their details.
How long answers are kept
In the app’s Privacy and plan page, choose to keep individual answers for 7, 30, 60 or 90 days. New stores start at 30 days.
- Every night, the app adds up each day’s answers into daily totals: the number of answers and the sum of their order totals.
- In the first nightly run after your retention period, the individual answers are deleted, so an answer can stay up to about one day longer.
- The daily totals stay, so your charts keep their history. They contain no order ID and no text.
- The text of written answers is deleted with the answers. Insights keeps the count.
The text of written answers is always deleted at the end of the retention period. Only the number of written answers per day stays. Theme summaries for written answers are coming soon.
The app also keeps the ID of each order that answered, so that one order cannot answer twice. It deletes an ID when a buyer’s deletion request covers that order, or when it deletes your store’s data.
Small groups are hidden in reports
In the app’s reports, an answer that fewer than 3 buyers gave is never shown on its own. See Insights for how this works. This rule does not apply to exports: the answers export lists each answer with its order ID. Each answer is also attached to its own order in your Shopify admin, through order tags and the order’s app data.
GDPR and privacy requests
Shopify sends privacy requests to the app automatically. You don’t need to forward them.
| Request | What the app does |
|---|---|
| A buyer asks for their data | The app keeps no names or contact details. Answers are linked only to an order ID, and you can see them on the order in Shopify. If you need more help, write to us. |
| A buyer asks to be deleted | Shopify tells the app which orders belong to the buyer. The app deletes the answers and order IDs for those orders. Daily totals stay, and tags already on the order stay with the order in Shopify. |
| You uninstall the app | Shopify asks the app to delete your store’s data, about 48 hours after you uninstall. The app deletes all of it. |
Where the data is
The app runs on Cloudflare. Answers and settings are stored there. Read the full privacy policy.