Privacy Policy

1. Introduction

Welcome to Cazy Quiz ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify application.

By installing and using Cazy Quiz, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

2.1 Store Information

• Shop domain and name
• Store owner email address
• Store access tokens (securely stored)

2.2 Quiz Data

• Quiz configurations and settings
• Questions and answers created by merchants
• Product recommendations and mappings

2.3 Customer Data

• Quiz responses from store customers
• Email addresses (only collected with explicit consent)
• Quiz completion analytics

Important: We only collect customer email addresses when users explicitly provide consent through a checkbox during quiz participation. Email collection is entirely optional, and users can complete quizzes without providing an email address.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide and maintain our quiz builder service
• To personalize product recommendations for customers
• To analyze quiz performance and provide analytics
• To improve our application and user experience
• To communicate with merchants about their account or service updates
• To comply with legal obligations

4. Data Storage and Location

Your data is stored securely using the following infrastructure:

• Primary Database: PostgreSQL hosted on Supabase (United States)
• Application Hosting: Secure cloud infrastructure (Europe)
• Data Processing: All data is processed and stored with enterprise-grade security

We use Supabase as our database service provider. Both Supabase and our hosting infrastructure comply with SOC 2 Type II, GDPR, and other international data protection standards.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With Shopify: As required for app functionality within the Shopify ecosystem
• Data Processors: We use the following trusted third-party service providers:
  • Supabase (database hosting and management)
  • Google Gemini AI (AI-powered quiz generation - no customer PII shared)
• Legal Requirements: When required by law or to protect our rights

All data processors are required to maintain strict data protection standards and use your data only for the purposes we specify.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for all data transmissions
• Secure token-based authentication with Shopify
• Regular security audits and updates
• Access controls and data encryption at rest

7. Data Retention

We retain your data for as long as your app is installed on your Shopify store. Upon uninstallation, we will delete your data within 30 days, unless required to retain it for legal purposes.

Quiz response data may be retained for analytics purposes but will be anonymized after the app is uninstalled.

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to the processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the information provided below.

9. Cookies and Tracking

Our application may use essential cookies required for authentication and session management. We do not use cookies for advertising or tracking purposes beyond what is necessary for the app's functionality.

10. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Or send us a message directly: