Survey ("the app", "we", "us") is a Shopify application that lets merchants collect feedback from shoppers on the Thank-you and Order status pages after checkout. This Privacy Policy explains what data the app collects, from whom, why, and how it is handled.

Two separate people interact with Survey, and this policy covers both: the merchant who installs the app in their Shopify admin, and the shopper who answers a survey at checkout.

1. Information We Collect

Store Information

When a merchant installs Survey, we receive their shop domain (e.g. your-store.myshopify.com) and the access scopes they approve. This identifies which store a survey, response, or subscription record belongs to.

Survey Configuration

We store the surveys a merchant builds — questions, field types, placement (Thank-you page or Order status page), and publishing status. This is merchant-authored content, not personal data.

Survey Responses

When a shopper submits a survey, we store their answers, which fields to which questions, and the order the response is linked to. What personal data this includes depends entirely on the questions the merchant chooses to ask — a survey may ask only for a rating, or it may include fields like name or email. We do not add fields shoppers were not shown.

Marketing Consent

If a survey includes a marketing opt-in and a shopper agrees to it, we record that consent (the exact wording shown, a timestamp, and — where available — the IP address of the request) as evidence of what was agreed to. If the shopper opted in with an email address, we pass that consent to Shopify so the shopper is added as a subscribed customer on the merchant's store. We do not send marketing ourselves.

Device Type

We record whether a response was submitted from a desktop or mobile device, derived from the browser's user-agent string at the moment of submission. The raw user-agent string itself is not stored.

Billing and Usage

For merchants on a paid plan, we store which plan they are on, their Shopify subscription identifiers, and a monthly count of survey responses collected, used to enforce each plan's allowance. This is store-level data, not shopper data.

Support Requests

If a merchant contacts us through the app's support form, we store the name, email address, industry, and message they provide, so we can respond.

2. How We Use Information

We use the information described above to:

• Publish and render a merchant's survey on their storefront's Thank-you and Order status pages
• Record and display survey responses and analytics in the merchant's admin dashboard
• Honour a shopper's marketing consent, including adding them as a subscribed customer in Shopify when they opt in
• Enforce the response allowance of the merchant's plan and show them their usage
• Respond to support requests
• Operate, maintain, and improve the app

3. Data Storage and Security

Published survey configurations are also stored as app-owned Shopify metafields on the merchant's store, readable only by the merchant's own admin — this is what lets the storefront render a survey without an extra network request. The underlying records — surveys, responses, consent, subscription and usage data — are stored in a MongoDB database hosted by MongoDB, Inc., which acts as our data processor. All data transmitted between a shopper's browser, a merchant's admin, and our servers is encrypted using HTTPS.

4. Data Sharing

We do not sell, rent, or trade personal information. We share data only in the following circumstances:

• With Shopify, as required for the app to authenticate, bill, and function within a merchant's store
• With MongoDB, Inc., our database hosting provider, solely to store the data described above
• When required by law or to respond to a valid legal process
• To protect our rights, the security of our service, or the safety of our users

5. Your Rights Under GDPR and Similar Laws

If you are located in the European Union, United Kingdom, or another jurisdiction with similar data protection laws, you may have rights over the personal data we hold about you, including:

• Right of Access: request a copy of the personal data we hold about you.
• Right to Rectification: ask us to correct inaccurate data.
• Right to Erasure: ask us to delete your personal data.
• Right to Data Portability: request your data in a portable format.

To exercise any of these rights — whether you are a merchant or a shopper who answered a survey — contact the app developer. We will respond within a reasonable time and in line with applicable law.

6. Data Retention

We retain a merchant's surveys, responses, and usage records for as long as the app remains installed, so the merchant retains full access to their own data. If the app is uninstalled, Shopify sends us a shop data erasure request 48 hours later, and all surveys, responses, consent records, usage, subscription and support records for that store are then permanently deleted. When Shopify forwards a customer's erasure request, that customer's survey responses are deleted.

7. Cookies and Tracking

The Survey admin runs embedded inside Shopify Admin and authenticates using Shopify's own session tokens, not third-party cookies. The checkout and order-status survey itself runs inside Shopify's Checkout UI Extension sandbox, which has no access to cookies or local storage of the storefront. We do not use third-party advertising or analytics trackers.

8. Children's Privacy

Survey is a business tool intended for use by Shopify merchants and their adult customers. It is not directed at children, and we do not knowingly collect personal information from children under 16.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make a material change, we will update the "Last updated" date at the top of this page.