Privacy Policy

How ShopperQuiz collects, uses and protects merchant and shopper data.

Last updated: November 5, 2026

ShopperQuiz ("we", "us", or "our") is a product recommendation quiz platform for Shopify and WooCommerce merchants. This Privacy Policy explains what data we collect, how we use it, and how we protect it. It covers two distinct groups: merchants (store owners who use the ShopperQuiz dashboard) and shoppers (end customers who take quizzes on merchant storefronts).

1. Who we are

ShopperQuiz is operated by ShopperQuiz. Our platform is accessible at app.shopper-quiz.com. For privacy questions, contact us at [email protected].

2. Data we collect from merchants

When you connect your store and use ShopperQuiz, we collect and store:

Account data

• Name and email address (used for authentication and support)

Store data

• Store URL, store name, and platform (Shopify or WooCommerce)
• OAuth access token (Shopify) or REST API keys (WooCommerce) — stored encrypted, used only to sync your product catalog and process cart operations

Product catalog data (cached)

• Product names, prices, images, tags, and collection/category assignments — synced from your store and cached in our database to power the quiz builder and the voting engine at runtime. We do not modify your products.

Quiz data

• All quiz content you create: questions, answers, vote assignments, welcome screen settings, results screen settings, and widget styles

Response data

• Individual shopper quiz sessions: answers given, products recommended, completion status, cart interactions, and revenue attributed (where available)

AI features

• When you use Ana or the AI Quiz Builder, your messages and the quiz and catalog details needed to answer them are sent to our AI provider. We keep a record of the AI credits each request used; we do not store your chat text on our servers. If you rate an answer, we store the rating.
• Images you upload to the image library are stored with your account, and may be sent to our AI provider to write a short description of each image.

Billing data

• For Shopify merchants: billing is handled entirely by Shopify. We store your active plan name and subscription status. We do not store card details.
• For WooCommerce merchants: payments are processed by Paystack. We store your Paystack customer code and subscription code. We do not store card details.

3. Data we collect from shoppers

Shoppers interact with the quiz widget embedded on merchant storefronts. We collect:

• Quiz answers — the answers a shopper selects as they move through the quiz
• Email address and name — only if the merchant has enabled email collection in the quiz (on the welcome screen or before the results) and the shopper provides them
• Mailing list opt-in — whether the shopper consented to be added to the merchant's mailing list (if the opt-in checkbox is enabled)
• Cart and checkout events — whether the shopper added products to their cart or completed a purchase after viewing their results
• Quiz activity — which help windows the shopper opened, and the AI summary shown on their results (if the merchant has turned it on)
• Advertising and analytics identifiers — only if the merchant has connected Google Analytics 4, Meta or TikTok: a random visitor ID, identifiers already set by the merchant's own tags (for example the _ga, _fbp, _fbc and _ttp cookies, or an ad-click ID in the page address), and, for Meta and TikTok, the shopper's IP address and browser user agent

We do not collect payment information from shoppers. We do not sell shopper data.

4. How we use merchant data

• To provide and operate the ShopperQuiz service
• To sync your product catalog so the quiz builder and widget function correctly
• To process billing and manage your subscription
• To send transactional emails (plan confirmations, password resets)
• To provide customer support

5. How we use shopper data

• To run the quiz and calculate product recommendations using the voting engine
• To record quiz responses so merchants can view analytics and individual response details in their dashboard
• To send shopper data to the tools the merchant has connected (see section 8). Shoppers are subscribed to a mailing list only if they tick the newsletter checkbox
• To email shoppers their results, through the merchant's own email sending account, if the merchant has turned this on and the shopper gave their email
• To write a short AI summary of why the products were recommended, if the merchant has turned it on. Only the shopper's answers and the recommended products are sent to our AI provider, never the shopper's name or email
• To attribute revenue and cart activity to quiz sessions for merchant analytics

6. Shopify API data use

ShopperQuiz accesses your Shopify store using the following API scopes:

• read_products — to sync your product catalog (names, prices, images, tags, variants, and collection memberships) into our database so the quiz builder and voting engine can use them
• read_product_listings — to access published product listings for the same catalog sync
• read_inventory — to read inventory quantities on product variants, used to determine in-stock status for recommendations
• read_orders — to receive order paid webhooks from Shopify. When a shopper completes a purchase after taking a quiz, the order webhook is used solely to attribute revenue back to the quiz session in your analytics. We read the order total and line items for this purpose only.

We also use Shopify's Billing API (via GraphQL) to create and manage your ShopperQuiz app subscription — this does not require an additional scope as it is part of the app installation.

We do not access customer personal data from Shopify, financial account data, draft orders, metafields, or any resource beyond what is listed above. Data synced from Shopify is used solely to provide the ShopperQuiz service to you and is not shared with third parties for any other purpose.

7. WooCommerce API data use

For WooCommerce stores, ShopperQuiz uses REST API keys with Read/Write access to:

• Products (/wp-json/wc/v3/products) — to sync your product catalog (names, prices, images, tags, categories, stock status, and variations) into our database
• Product categories (/wp-json/wc/v3/products/categories) — to sync your categories, which map to collections in ShopperQuiz
• Product tags (/wp-json/wc/v3/products/tags) — to sync tag names and counts
• Orders (/wp-json/wc/v3/orders/{id}) — read only when an order webhook is received and the payload is incomplete. We read the order ID, total, status, and custom meta fields (specifically _sq_response_id) to attribute revenue back to the quiz session in your analytics. We do not read customer personal details, billing addresses, or payment information from orders.
• System status and store settings — to verify credentials on connection and retrieve your store name and currency
• Webhooks (/wp-json/wc/v3/webhooks) — write access to register the following webhook topics: product.created, product.updated, product.deleted, order.updated, and action.woocommerce_payment_complete, so your catalog and revenue data stay up to date automatically

We do not access WooCommerce customer records, billing addresses, payment details, coupons, or any resource beyond what is listed above.

8. Data sharing and third parties

We share data with third-party services only as necessary to operate ShopperQuiz:

Category	Purpose	Data shared
Database and authentication provider	Storing all application data securely	All stored data resides here
Hosting and CDN provider	Serving the dashboard and API	Request metadata
Payment processor (Shopify merchants)	Managing app subscriptions via Shopify's billing system	Plan name, subscription status
Payment processor (WooCommerce merchants)	Processing monthly subscription payments	Merchant email, plan, subscription codes
Transactional email provider	Sending password resets and plan confirmations	Merchant email address
AI provider	Running Ana, the AI Quiz Builder, image descriptions and the AI summary on quiz results	Merchant messages, quiz content and catalog details; for the AI summary, the shopper's answers and recommended products (never their name or email)
Product review apps (when connected by the merchant)	Showing star ratings on quiz results	Product identifiers only

Tools the merchant connects. These receive data only when the merchant connects them, and only for the quizzes the merchant chooses:

Category	Purpose	Data shared
Email marketing and CRM tools (Klaviyo, Mailchimp, HubSpot)	Adding shoppers to the merchant's contacts, with their quiz results	Shopper name, email and newsletter consent, quiz answers, recommended products and quiz events; HubSpot can also receive cart and order details
Advertising and analytics platforms (Google Analytics 4, Meta, TikTok)	Measuring the quiz and its sales in the merchant's own account	Quiz events, the products viewed, added to cart and bought, order value, and the identifiers described in section 3; Meta and TikTok also receive the shopper's IP address, browser user agent and, when given, their email as a one-way SHA-256 hash (Meta also a hashed first name)
Automation tools (Zapier, webhooks, the ShopperQuiz API)	Sending quiz events to destinations the merchant sets up	The response data the merchant chooses to receive, which can include name, email, answers, recommendations, cart and order events
The merchant's email sending account (Resend)	Emailing shoppers their results	Shopper email, name and recommended products

When a merchant connects one of these tools, they choose to share their shoppers' data with it and are responsible for telling their shoppers in their own privacy policy.

We do not sell data. Shopper data reaches advertising or analytics platforms only when the merchant connects that integration.

9. Data retention

• Merchant account data — retained for as long as your account is active. Deleted immediately upon account deletion.
• Product catalog cache — deleted immediately when you disconnect your store or delete your account.
• Quiz and response data — retained for as long as your account is active. Deleted immediately upon account deletion, or immediately when you use the "Disconnect & delete all quiz data" option.
• Shopper data — retained as part of quiz response records. Deleted immediately when the merchant deletes their account or uses the "Disconnect & delete all quiz data" option.
• IP address and browser user agent (Meta and TikTok only) — removed from our records 30 days after the quiz.
• Data sent to connected tools — kept by those tools under their own policies and the merchant's settings there. Disconnecting stops new data being sent; it does not delete what was already sent.

10. Data security

All data is stored with row-level security enabled — each merchant can only access their own data. API keys and access tokens are stored encrypted. All data is transmitted over HTTPS.

11. Your rights

Merchants may request access to, correction of, or deletion of their personal data at any time by contacting [email protected] or using the Delete Account option in Settings.

Shoppers whose email addresses have been collected may contact [email protected] to request deletion of their data.

If you are located in the EEA or UK, you have rights under GDPR including the right to access, rectify, erase, restrict processing, and data portability. Contact us at [email protected] to exercise these rights.

12. Cookies

The ShopperQuiz dashboard (app.shopper-quiz.com) uses cookies for authentication only.

The quiz widget embedded on merchant storefronts does not set cookies on shoppers' browsers. It uses the browser's storage instead:

• Session storage (cleared when the tab is closed): the shopper's place in the quiz, so a page refresh does not lose their answers, and, for a retake in the same visit, the name and email they already gave.
• Local storage: a random visitor ID, only when the merchant has connected Google Analytics 4, Meta or TikTok; and, when a shopper arrives from a TikTok ad, the ad-click ID from the page address, for up to 7 days.

The storefront script also reads the identifiers the merchant's own tags have already set (listed in section 3) and passes them to the quiz. They are only used, and only sent to us, when the merchant has connected that platform.

13. Children's privacy

ShopperQuiz is not directed at children under 18. We do not knowingly collect personal data from children under 18.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of ShopperQuiz after changes are posted constitutes acceptance of the updated policy. For material changes, we will notify merchants by email.

15. Contact

For privacy questions or to exercise your rights, contact us at [email protected].