Privacy Policy

1. Introduction

QuizInsights provides interactive storefront quizzes that help shoppers discover products. When you install the App, it stores quiz content, shopper responses, optional lead details, and product recommendation results configured by the merchant.

We are committed to maintaining the confidentiality of merchant and buyer records. This notice outlines our handling methods to meet Shopify developer guidelines and global regulations such as GDPR and UK GDPR.

This page is provided for informational purposes and does not constitute legal advice. If you have questions about how privacy laws apply to your business, please consult a qualified legal professional.

2. Who This Policy Applies To

We process data relating to:

• Merchants who install QuizInsights on their Shopify store.
• Authorized store staff who configure quizzes and review submissions in the admin app.
• Shoppers who complete quizzes, submit optional contact details, or view product recommendations on the merchant's storefront.

3. Information We Collect Through Shopify

With the merchant's consent during installation, the App uses Shopify APIs and session data to operate. This includes:

• Store identity and session information required for secure admin access.
• Product and collection data (names, IDs, and images) used to build quiz recommendations.
• App subscription and billing status processed through Shopify's billing system.
• Images uploaded by merchants through the admin, stored via Shopify's file hosting where applicable.

The App requests the following Shopify access scopes:

• read_products — to load product and collection details used in quiz recommendations and the quiz builder.
• write_files — to upload images merchants attach to quiz answer options, stored through Shopify's file hosting APIs.

We do not request access to orders, payments, Shopify customer account records beyond what shoppers submit through the quiz, or other Shopify data outside what is needed to run QuizInsights.

4. Information We Collect Directly From Merchants

We retain settings and content you configure in the QuizInsights admin, including:

• Quiz titles, questions, answer options, and product or collection mappings.
• Design and display settings such as colors, layout options, and optional custom CSS or JavaScript on eligible plans.
• Quiz submissions and lead details collected from shoppers, visible in the Responses area of the app.
• Technical logs used to diagnose errors and maintain service reliability.

5. Information We Collect From Merchants' Customers

When a shopper completes a quiz on a merchant's storefront, we may store:

• Answers selected during the quiz session.
• Name and email address when the merchant has enabled lead capture.
• Product recommendations generated from the shopper's answers.
• An optional Shopify customer ID when available from the logged-in storefront session.

Shopper contact details are used for lead generation and for the merchant to review submissions inside QuizInsights. The App does not use third-party advertising cookies or marketing pixels on customer devices. The storefront quiz may use browser local storage on the shopper's device to restore an in-progress or completed quiz session; this data stays on the device and is not used for cross-site tracking.

6. How We Use Information

We use collected information to:

• Display quizzes and product recommendations on the merchant's storefront.
• Store and display quiz submissions to the merchant in the admin app.
• Authenticate merchant access and manage app subscriptions.
• Provide optional headless or iframe embed functionality on eligible plans.
• Maintain security, prevent abuse, and troubleshoot technical issues.

We do not sell personal data or use merchant or shopper data to advertise third-party services.

7. Legal Basis for Processing (EEA/UK)

Where GDPR or UK GDPR applies, we rely on:

• Contract — To provide QuizInsights to the merchant.
• Legitimate interests — To secure, maintain, and improve the App.
• Legal obligation — To comply with applicable law and Shopify requirements.
• Consent — Where a shopper chooses to submit contact details through a quiz form.

8. Data Sharing and Processors

We use infrastructure providers such as cloud hosting and database services to operate QuizInsights. These providers process data on our behalf under appropriate safeguards and may not use the data for their own marketing purposes.

We may disclose information if required by law or to protect the rights, safety, and security of users and our services.

Shopify processes store and checkout data under its own privacy policies. Merchants should also refer to Shopify's documentation on mandatory compliance webhooks and data subject requests.

9. International Data Transfers

Information processed by QuizInsights may be stored or processed in countries outside the shopper's or merchant's home jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

10. Data Retention

We retain personal information only as long as needed for the purposes described above:

• Merchant quiz configuration and submissions are kept while the App remains installed and in use.
• Customer quiz data may be anonymized when Shopify sends a redaction request or after uninstall, as described in section 11.
• After uninstall, Shopify sends a shop/redact webhook approximately 48 hours later. We anonymize shopper personal data in quiz submissions at that time. Merchant-created quiz content (titles, questions, design settings) may remain stored without shopper names, emails, or recommendation payloads until manually purged or a later deletion process, because it does not identify individual customers.
• Server logs are retained for a limited period for security and troubleshooting.

11. Data Subject Rights and GDPR Webhooks

Depending on applicable law, individuals may request access to, correction of, or deletion of personal data. QuizInsights supports Shopify's mandatory compliance webhooks:

• customers/data_request — Locates quiz submissions and answers linked to the customer. Merchants view and export those records in the QuizInsights Responses admin page (search by the customer's email or use the CSV export).
• customers/redact — Anonymizes personal identifying details in quiz records upon request.
• shop/redact — Sent by Shopify about 48 hours after uninstall. We anonymize shopper personal data in all quiz submissions for that store (names, email addresses, and stored recommendation results) and remove customer IDs linked to answers. Merchant quiz configuration—quiz containers, questions, answer options, and app settings—may be retained because it is merchant-authored content and, after anonymization, no longer contains identifiable customer information.

Merchants are responsible for responding to their customers' privacy requests. If you need help locating customer quiz data before redaction, use the Responses page or contact us. If you require complete deletion of all stored app data for your shop, contact us at appsupport@galaxyweblinks.com.

12. Security

We use HTTPS, access controls, and other reasonable technical and organizational measures to protect data. No method of transmission or storage is completely secure.

13. Children's Privacy

QuizInsights is intended for business use by merchants and is not directed at children. If we learn that personal information from a child was collected without appropriate authorization, we will take steps to delete or anonymize it.

14. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of QuizInsights after an update constitutes acceptance of the revised policy.