Privacy Policy

When you connect your store and use ShopperQuiz, we collect and store:

Shoppers interact with the quiz widget embedded on merchant storefronts. We collect:

• Quiz answers — the answers a shopper selects as they move through the quiz
• Email address and name — only if the merchant has enabled email collection on the welcome screen and the shopper provides them
• Mailing list opt-in — whether the shopper consented to be added to the merchant's mailing list (if the opt-in checkbox is enabled)
• Cart and checkout events — whether the shopper added products to their cart or completed a purchase after viewing their results

We do not collect payment information from shoppers. We do not track shoppers across other websites. We do not sell shopper data.

ShopperQuiz accesses your Shopify store using the following API scopes:

• read_products — to sync your product catalog (names, prices, images, tags, variants, and collection memberships) into our database so the quiz builder and voting engine can use them
• read_product_listings — to access published product listings for the same catalog sync
• read_inventory — to read inventory quantities on product variants, used to determine in-stock status for recommendations
• read_orders — to receive order paid webhooks from Shopify. When a shopper completes a purchase after taking a quiz, the order webhook is used solely to attribute revenue back to the quiz session in your analytics. We read the order total and line items for this purpose only.

We also use Shopify's Billing API (via GraphQL) to create and manage your ShopperQuiz app subscription — this does not require an additional scope as it is part of the app installation.

We do not access customer personal data from Shopify, financial account data, draft orders, metafields, or any resource beyond what is listed above. Data synced from Shopify is used solely to provide the ShopperQuiz service to you and is not shared with third parties for any other purpose.

For WooCommerce stores, ShopperQuiz uses REST API keys with Read/Write access to:

• Products (/wp-json/wc/v3/products) — to sync your product catalog (names, prices, images, tags, categories, stock status, and variations) into our database
• Product categories (/wp-json/wc/v3/products/categories) — to sync your categories, which map to collections in ShopperQuiz
• Product tags (/wp-json/wc/v3/products/tags) — to sync tag names and counts
• Orders (/wp-json/wc/v3/orders/{id}) — read only when an order webhook is received and the payload is incomplete. We read the order ID, total, status, and custom meta fields (specifically _sq_response_id) to attribute revenue back to the quiz session in your analytics. We do not read customer personal details, billing addresses, or payment information from orders.
• System status and store settings — to verify credentials on connection and retrieve your store name and currency
• Webhooks (/wp-json/wc/v3/webhooks) — write access to register webhook topics: product.created, product.updated, product.deleted, order.updated, and action.woocommerce_payment_complete, so your catalog and revenue data stay up to date automatically

We do not access WooCommerce customer records, billing addresses, payment details, coupons, or any resource beyond what is listed above.

We share data with third-party services only as necessary to operate ShopperQuiz:

We do not sell data. We do not share shopper data with advertising networks.

Merchants may request access to, correction of, or deletion of their personal data at any time by contacting support@shopper-quiz.com or using the Delete Account option in Settings.

Shoppers whose email addresses have been collected may contact support@shopper-quiz.com to request deletion of their data.

If you are located in the EEA or UK, you have rights under GDPR including the right to access, rectify, erase, restrict processing, and data portability. Contact us at support@shopper-quiz.com to exercise these rights.