Privacy policy

Information we process

Findory processes the shop domain, Shopify installation and authentication session, merchant-authored quiz content, published versions, appearance settings, hashed public access tokens, and App plan entitlement needed to operate the service. An authenticated Shopify staff session can also include limited staff-account metadata supplied by Shopify for authentication and access control. This information is associated with the merchant account, not with a storefront shopper profile.

We may process limited security and diagnostic metadata such as request time, route, response status, error code, IP address, and user agent. We do not intentionally place quiz answers or Shopify customer records in logs.

The quiz-only release uses Shopify's app proxy to deliver published quiz configuration under the merchant's storefront domain. It does not request Shopify customer, order, payment method, subscription-contract, checkout, product-catalog, or inventory data. It does not read or store a shopper's Shopify name, address, phone number, or email address.

Shopper quiz answers

Answer choices are evaluated in browser memory for the current quiz run. They are not sent to Findory and are not stored as a customer profile. Refreshing or leaving the page clears the current answer state.

Loading a published quiz creates an ordinary web request that can expose network metadata to the hosting infrastructure. If a merchant adds a result image hosted by another provider, that image is requested only after the result is shown. The image provider can receive ordinary network metadata and may infer which result was displayed from the requested image URL. Findory suppresses the storefront referrer, but the merchant remains responsible for its selected image provider and notices.

How we use information

• Authenticate merchants and isolate each shop's data.
• Save, validate, preview, publish, pause, and display quizzes.
• Verify App plan entitlement and enforce plan limits.
• Protect the service, diagnose failures, and provide support.
• Honor verified Shopify privacy and shop-deletion requests.

We do not sell personal information, build shopper profiles, or use quiz answers for advertising.

Service providers and transfers

Shopify provides app installation, authentication, App plans, and platform delivery. DigitalOcean hosts the application and PostgreSQL database. Juniper Taylor (Findory) handles the public support mailbox. These providers process information only as needed to deliver their services. Transfer details: Shopify platform services and DigitalOcean Singapore hosting, with safeguards described in the privacy policy.

Retention and deletion

Merchant configuration remains available while the app is installed. On uninstall or a verified shop-redaction request, Findory revokes public quiz access and deletes the shop-owned tenant data from the active database, including sessions, quizzes, versions, App plan entitlement snapshots, audit events, and rate-limit records through the documented cleanup flow. Required Shopify privacy webhooks are signature-verified before processing.

Findory has no stored shopper quiz answers or Shopify customer records to return or delete for a customer-specific privacy request. A verified request is acknowledged without creating a customer profile. Short-lived, one-way security guards can remain temporarily after shop deletion to prevent an older installation or delayed webhook from recreating deleted tenant data; they contain no plain shop domain, access token, merchant content, or shopper data and expire after seven days. Minimal pseudonymous webhook replay receipts become eligible for deletion after 30 days and are pruned during later verified webhook processing; no scheduled cleanup Worker is used.

• Application and security logs: Operational and security logs are retained for up to 30 days.
• Operational backups: Encrypted operational backups are access-restricted, retained for up to 30 days, and used only for disaster recovery. When a backup is restored, verified deletion requests are reapplied before normal service resumes.
• Support messages: Support records are retained for up to 90 days after closure.
• Required legal records: Records are retained longer only when required by applicable law.

Security and choices

Findory uses encrypted transport, environment-managed secrets, official Shopify authentication, webhook signature validation, shop-level access checks, and restricted public tokens. Merchants should not enter passwords, access tokens, private customer information, or sensitive personal data in quiz content, destination URLs, or support messages.

Quiz recommendations use only the shopper's current in-browser answers and merchant-authored rules. They are not used by Findory for legal or similarly significant decisions.

Depending on local law, you may request access, correction, deletion, restriction, or portability by contacting the merchant or emailing [email protected].

Contact and changes

We may update this policy when the service or legal requirements change. The effective date above identifies the current version.

Juniper Taylor
503 Lisbeth Rd, Newark, DE 19713
Privacy: [email protected]