Privacy Policy for RecommendIQ Quiz Shopify App

Privacy & Retention Policy (App)

This document describes what data the app collects, how it is used, how long it is retained, and how it is deleted. Use this as your app listing privacy policy and internal reference.

Data Collected From Shopify APIs

• Shop and merchant identifiers (shop domain, merchant ID) for authentication and app functionality.
• Shopify data required to support quiz setup and product recommendations, based on the scopes granted by the merchant.

Data Collected Directly From Merchants

• Quiz content created by merchants (titles, questions, answers, settings).
• Quiz analytics generated by the app (starts, completions, answer selections, recommended products).
• Chat assistant logs (merchant messages and assistant responses).

Customer Data

The app does not intentionally collect customer personal data (PII). If a merchant includes PII in quiz answers or chat messages, it may be stored as part of quiz responses or chat logs.

Cookies and Tracking

The app does not place tracking cookies on merchant storefronts. The app relies on Shopify-admin authentication and standard web session functionality when the merchant uses the app.

How Data Is Used

• Provide quiz creation, display, and recommendation features.
• Generate analytics and insights for quiz performance.
• Provide AI assistant support and help suggestions.

Retention

• Default retention is 90 days for quiz responses, chat logs, and webhook events.
• Retention is configurable with the RETENTION_DAYS environment variable.

Deletion

• On app/uninstalled or shop/redact webhook, all shop data is deleted:
  • Quizzes, quiz responses, chat logs, notifications, merchant settings, and sessions.
• On customers/redact webhook:
  • If customer identifiers are stored in the future (e.g., customerId), records associated with that customer are deleted.
• On customers/data_request webhook:
  • We compile any customer data stored by the app and provide it to the merchant on request.
  • We log the request details for follow-up, and purge the log per the retention policy.

Data Access & Requests

Merchants can request data access or deletion by contacting support using the email listed in the Shopify App Store listing for RecommendIQ Quiz. All GDPR-related requests are handled via Shopify GDPR webhooks.

Data Processing and Storage

Data is processed and stored using our application hosting infrastructure and Shopify’s platform. Processing locations depend on the hosting configuration and may include regions outside the merchant’s country.

Changes

This policy may be updated. The current version is stored in this repository as privacy-policy-riq-quiz.md.