Quizzo Privacy Policy

Last updated: July 29, 2026

This Privacy Policy applies solely to the Quizzo Shopify app, published by Extensions Market. It fully discloses what data Quizzo collects from merchants and their stores, how that data is used, with whom it is shared, and how it is stored and retained. By installing or using Quizzo, you (the merchant) agree to this policy.

1. What data Quizzo collects

Merchant data (collected on install)

Shop domain — the myshopify.com domain of the store that installs Quizzo (e.g., yourstore.myshopify.com). Used to identify the merchant account and make authenticated API calls to the Shopify Admin API on the merchant's behalf.
OAuth access token — a Shopify-issued access token provided during the OAuth installation flow. Used to authenticate all Shopify Admin API requests made by Quizzo. Stored securely in our database.

Merchant settings (stored per shop)

Quiz configuration — the quiz questions, options, and product-matching rules the merchant builds or auto-generates from their catalog.
Reward configuration — the reward tiers and maximum discount the merchant sets for the spin-to-win wheel and bundle discount.
Discount activation status — whether the bundle discount is currently enabled or disabled for the store.
Product eligibility — which products are marked eligible for the quiz and bundle, stored as product tags and metafields on the merchant's own store.

Anonymous quiz analytics (no personal data)

To power the merchant's funnel dashboard, Quizzo records anonymous quiz events on the merchant's storefront — for example when a quiz is opened, started, completed, spun, or when items are added to cart. Each visit is tagged with a random, per-visit session identifier that is not linked to any shopper's name, email, address, IP, or Shopify customer account. These events are aggregated into funnel counts (opens, completions, add-to-carts) for the merchant.

Data we do NOT collect from shoppers

Quizzo does not collect any personally identifiable information from end customers (shoppers) visiting the merchant's store. It does not collect names, emails, addresses, IP addresses, payment information, or Shopify customer records. Individual quiz answers are used on the storefront to build recommendations and are not stored against any identifiable person.

2. How merchant data is used

To authenticate Shopify Admin API requests for creating and managing Shopify Functions (discount logic)
To apply the merchant's configured reward and bundle-discount rules at checkout via Shopify Functions
To display and update the merchant's quiz, rewards, and settings in the Quizzo dashboard
To manage product eligibility (tags and metafields) for quiz recommendations
To show the merchant an aggregated, anonymous funnel dashboard (quiz opens, completions, add-to-carts)

Merchant data is never used for advertising, resold, or shared with any third party beyond what is required to operate the app.

3. Third parties your data is shared with

Third Party	Data Shared	Purpose	Their Privacy Policy
Shopify	Shop domain, OAuth access token	Quizzo is built on the Shopify platform. All app installation, OAuth, and Admin API interactions are handled through Shopify's infrastructure. Shopify processes data in accordance with their privacy policy.	shopify.com/legal/privacy
Railway	Shop domain, OAuth access token, merchant settings, anonymous quiz analytics	Cloud infrastructure hosting our application server and PostgreSQL database where merchant data is stored.	railway.app/legal/privacy

4. Data storage and retention

Shop domain, OAuth access token, merchant settings, and anonymous quiz analytics — stored in a private PostgreSQL database hosted on Railway for as long as the app is installed on the merchant's store.
On uninstallation — when a merchant uninstalls Quizzo, Shopify sends an app/uninstalled webhook to our server. All merchant data (shop domain, OAuth access token, settings, and anonymous quiz analytics) is permanently deleted from our database within 48 hours of receiving this webhook.
Shopper personal data — not collected or stored. No customer personal data ever reaches our servers.

5. Shopify API access and permissions

Quizzo requests the following Shopify API access scopes during installation:

write_discounts / read_discounts — to create and manage Shopify Functions that apply automatic bundle discounts at checkout.
read_products / write_products — to read the catalog and apply product tags and metafields for quiz eligibility and recommendations.

Quizzo does not request access to customer personal data, order history, payment information, or any other merchant data beyond what is listed above.

6. Data security

All communication between Quizzo and Shopify's API uses HTTPS/TLS encryption. OAuth access tokens are stored securely in our Railway-hosted PostgreSQL database with access restricted to our application server. We do not log OAuth tokens in application logs.

7. Merchant rights

Access — request a copy of the data we hold about your store.
Correction — ask us to correct inaccurate settings data.
Deletion — uninstalling the app triggers automatic deletion within 48 hours. You may also request immediate deletion by contacting us.

To exercise any of these rights: [email protected]

8. Changes to this policy

We may update this policy as Quizzo evolves. The "Last updated" date at the top reflects the most recent revision. Continued use of Quizzo after changes constitutes acceptance of the updated policy.

9. Contact

[email protected]