Privacy Policy

Data we collect from merchants

• Account data: your name, email address, phone number (if you give it), store name and domain, language, and your user and store identifiers on your platform. If you sign in with Google or Facebook, we receive your name and email from them.
• Platform connection: the access tokens your platform issues to each app, kept in access-restricted databases (InstaFeed also encrypts them).
• Settings and usage: the popups, wheels, timers, badges, feeds, product options and automation rules you create, and how you use the dashboards.
• Support: messages, email and WhatsApp details you give us when you contact us, including through our support chat.
• Technical data: IP address, browser type and request logs when you use our sites and dashboards, kept for security and troubleshooting.

What each app reads from or changes in your store

Apps only use the access your platform grants when you install them.

• Popups and Lucky Wheel (both run on popupsnap.com): read your products and categories. Popups also reads orders: the buyer's first name, city and product feed the recent-sales notifications you turn on. On Salla, Popups can create the special offers you set up.
• InstaFeed: reads your product catalog so you can tag products on posts. It does not read orders or customer data. On WooCommerce it uses a read-only API key you authorise, and the plugin sends technical pings (product saved or removed, plugin deactivated, daily status check).
• Product Studio: reads your products and orders, and creates product options and bundle products in your store for the personalisations you set up.
• PopAutomate: reads your product list with stock and sold counts, and changes prices, discounts, tags, promotional text and product visibility exactly as your rules say. It does not read orders. Once it is listed on Shopify, it works as described in PopAutomate on Shopify.
• Countdown and Product Badges: read the products and categories you target.

PopAutomate on Shopify

No PopupSnap app is on the Shopify App Store yet. InstaFeed for Shopify is in progress and not yet listed, and PopAutomate is not on the Shopify App Store yet. This section describes how PopAutomate will work on Shopify once it is listed.

When you install PopAutomate from the Shopify App Store, it runs inside your Shopify admin and changes your products only as your schedules say. It adds no script, theme code or app block to your storefront and never sees your shoppers.

Permissions (access scopes) we ask for, and why:

• write_products (includes reading products): to list your products, variants and collections, change variant prices and compare-at prices, add products to or remove them from collections, and put the original prices back when a schedule ends.
• write_publications: to publish or hide products on your Online Store sales channel when a schedule says so, without changing the product's status on other channels.
• read_inventory, only if the app requests it at install: to read stock levels so a rule can find sold-out products.

We do not ask for access to orders, customers, checkouts or any other protected customer data.

What we store for your shop:

• your shop's myshopify.com domain and Shopify identifier, and the access token Shopify issues to the app (stored encrypted);
• for your PopAutomate account: the shop name, the shop's contact email, currency, time zone and language;
• the IDs of the products, variants and collections your schedules target, and each variant's price and compare-at price before and after every run, so we can restore them and show you an audit of every change;
• your schedules and rules, and a log of each run (time, result and any error);
• your plan and subscription status, which Shopify tells us.

Billing: on Shopify, PopAutomate is billed by Shopify, as described in Payments. We do not receive your card details.

Shopify's privacy webhooks:

• customers/data_request and customers/redact: PopAutomate holds no data about your customers, so there is nothing to export or delete. We record that the request arrived and answer Shopify.
• shop/redact, which Shopify sends 48 hours after you uninstall the app: we delete your shop's data listed above, except records we must keep by law (see How long we keep data). If you have installed the app again by then, we keep your data, because you are using it again.

When you uninstall: we stop all schedules and stop using your access token straight away. Your data stays until Shopify's shop/redact request. If you reinstall within 48 hours, your data is still there, but every schedule stays paused until you turn it back on.

Lucky Wheel on Shopify

This section applies only to Lucky Wheel when it is installed from the Shopify App Store. It does not apply to InstaFeed, PopAutomate, Product Studio or any other app, or to Lucky Wheel on Salla or Zid. For Lucky Wheel on Shopify it replaces the "Popups and Lucky Wheel" entry in Your store's shoppers.

Lucky Wheel is not on the Shopify App Store yet. This section describes how it works there once it is listed.

You, the merchant, are the controller of your shoppers' data, and we process it for you on your instructions. We are the controller of the merchant data described below.

Permissions (access scopes) we ask for, and why:

• write_app_proxy: so the wheel on your storefront can talk to the app through your own store address (/apps/luckywheel).
• write_discounts: to create and manage the discount codes the wheel gives out.
• write_customers: to save shoppers who enter an email or phone number as customers in your store, if customer saving is turned on (it is off unless we turn it on), as described below.

We do not ask for access to your orders, products or theme files.

What we store for your shop:

• your shop's myshopify.com domain, the access and refresh tokens Shopify issues to the app (stored encrypted), the permissions you granted, and your install and uninstall dates;
• your plan and subscription status, which we read from Shopify, and how many times your wheel was opened, counted per hour (no shopper details);
• your wheel's design, texts, prizes and the discount codes it creates.

You can see the shoppers who entered on your wheel on the Leads page in the app, search them by a whole email address or phone number, and export them as a CSV file. Every time you or our staff open this data, we write a log entry that holds no shopper data, and we never keep the CSV on our servers.

What we collect from your shoppers:

• the email and phone number the shopper types, if you switch those fields on for your wheel;
• whether the shopper ticked the email and SMS marketing boxes (both start unticked), and when;
• the spin: its time, the result (prize or no prize), the prize, the code and the code's expiry date;
• Shopify's customer id, only when the shopper is signed in to your store;
• one-way hashes of the email, the phone number and a random device token, used to allow one spin per person and device, and to find a shopper's records for a privacy request.

We do not save the shopper's IP address with the spin or the lead. Where your store shows a cookie banner, the wheel waits until the shopper has made a choice. If the choice allows it, the wheel keeps the device token and a note that the wheel was shown or spun in the browser's storage; otherwise it holds them in memory for that page only. To count one device once a day toward your plan, we keep a one-way hash that expires after that day. We do not sell this data. We use it only to run the wheel, deliver the prize and keep your records, and not for our own marketing.

What we read from your store: Shopify's install screen lists "Store owner" (name, email address, phone number, physical address) among the data the app can access. Lucky Wheel uses only two things from your shop record: the shop's currency, to create fixed-amount discounts, and the shop's contact email address and store name, to send you the plan-limit emails at 80% and 100%. We do not store that email address and do not write it to logs. We do not read the owner's phone number or address.

What the wheel sends from your storefront (Shopify's install screen calls these "app events"): when the wheel opens, one request goes to our server through your store's /apps/luckywheel address with a random device token, counted once per device, wheel and day toward your plan's views; when a shopper spins, the details they entered go the same way; and, only if customer saving is on and the shopper's cookie choice allows analytics, the Visitors API call described below. We use these only to run the wheel, allow one spin per person, count views for your plan and deliver the prize. The wheel loads no third-party analytics or advertising scripts.

Encryption: the shopper's email and phone number are encrypted in our database with a key kept only for Lucky Wheel (AES-256-CBC), not the key used elsewhere in PopupSnap. To find one shopper's records without decrypting everyone's, we also keep a keyed one-way hash (HMAC-SHA256) of the email and the phone number. We do not fall back to storing them unencrypted. Shopify's tokens are encrypted the same way, with their own key.

What we save in your Shopify store, only if customer saving is turned on: this feature is off unless we turn it on. If it is on for your store, when a shopper enters an email or phone number, Lucky Wheel saves them as a customer in your store, using write_customers:

• it first looks for an existing customer by the signed-in customer id, then by email, then by phone number;
• if there is none, it creates a customer with the email and phone number (a phone number is sent only if it includes a country code);
• if there is one, it never overwrites what you have: it only fills in an empty email or phone number;
• it sets marketing consent only for a box the shopper ticked and only for the address or number they typed, as subscribed with single opt-in and the time they ticked it. An unticked box changes nothing, and nobody is unsubscribed;
• when the shopper wins, it adds the tag lucky-wheel-winner (your other tags stay) and saves the prize name, the code and the code's expiry date in the customer's lucky_wheel metafields.

If customer saving is on, that customer record, its tag and its metafields then sit in your Shopify store. Shopify and you hold and control that copy, not PopupSnap, and our deletions below do not remove it. Uninstalling the app does not remove the tag or the metafields either.

Shopify's Visitors API: this runs only if customer saving is turned on and the app's Shopify app id is set. If it does run, after a spin in which the shopper entered an email or phone number, the wheel, running in the shopper's browser, passes that email or phone number to Shopify (Shopify.analytics.visitor) so that Shopify knows who the visitor is. It does this only when the shopper's cookie choice in your store allows analytics, and never from the preview in your Shopify admin. Nothing else is sent this way.

How long we keep it:

• spins and leads (the email, phone number, marketing consent and spin result a shopper gave): each is deleted 24 months after it was created, by a job that runs every day (earlier if your shop's data is deleted after an uninstall, or the shopper's data is erased on Shopify's request). After that, the same shopper can spin again on a wheel that is still running;
• a code that was already issued is no longer linked to the shopper once their spin is deleted, and stays valid until its discount ends;
• hourly view counts: 400 days;
• a record of each Shopify privacy request, without shopper details: 90 days; the export for a data request: 7 days;
• your shop's data: until 48 hours after you uninstall (see below).

Shopify's privacy requests (webhooks):

• customers/data_request: we find the shopper's spins and leads on your shop's wheels, by Shopify customer id or by matching email or phone number. We prepare one encrypted export for you with their email, phone number, marketing consent ticks and times, spin results, prizes, codes and dates, and keep it for 7 days. You can download it during those 7 days with the Download button on the Data requests card on the Home page of the Lucky Wheel app in your Shopify admin. We write the export even when we hold nothing, as the record that we answered.
• customers/redact: we delete that shopper's spins and leads on your shop's wheels, found the same way, and any export made for them.
• shop/redact, which Shopify sends 48 hours after you uninstall the app: we delete everything we hold for your shop: wheels, prizes, codes, spins, leads, plan and usage records, exports, any webhook payload still held, and last the shop record with its tokens. If you have installed the app again by then, we keep your data, because you are using it again. Our hourly clean-up deletes the data after the same 48 hours if Shopify's request has not arrived.

If a shopper typed a phone number in a different format, or used the wheel as a guest, these requests may not find their records; in that case the shopper or the merchant can ask support@popupsnap.com and we will search by the details they give.

When you uninstall: Shopify cuts the app's access. The wheel stops showing and spinning on your storefront, and we delete our stored tokens straight away. Your data stays for 48 hours in case you reinstall, then it is deleted as described above. Because Shopify cuts our access at uninstall, we cannot remove the discounts we created in your store: each one ends on its own end date, 90 days after it was created by default, and codes shoppers already won keep working until then. No new codes are issued.

Questions and requests: shoppers should contact the store first, since the store is the controller of their data; we help the store answer. Merchants can write to support@popupsnap.com, as described in Your rights and Contact us.

Your store's shoppers

Our apps run on the merchant's storefront. For this data the merchant is the controller and we process it on the merchant's instructions:

• Popups and Lucky Wheel: the details a shopper enters in a form or wheel (for example email, phone or name), the page, the approximate city and country worked out from the IP address on our own server, and a browser fingerprint to prevent duplicate entries. Popup views and clicks are counted. If the merchant turns on the store chatbot, the shopper's messages are stored with a random visitor identifier.
• InstaFeed: sets no cookies of its own. It stores a random identifier in the shopper's browser storage and sends it with view, click and play events, and with likes, bookmarks and comments, to count unique visitors and link those interactions. The identifier holds no name, email or IP address. Where the platform provides it, likes, bookmarks and comments are stored with the shopper's display name. The widget loads its Arabic font from Google Fonts, and fallback Instagram and TikTok embeds load from those platforms, which can set their own cookies.
• Product Studio: the images and text a shopper uploads to personalise a product. Unordered designs expire after 24 hours; ordered designs are kept with the order, together with the buyer's name, email and mobile from the order so the merchant can produce it.
• Countdown and Product Badges: do not collect shoppers' contact details. Countdown may keep a timer's end time in the browser.
• PopAutomate: runs in the merchant's store settings only and handles no shopper data.

Merchants must tell their shoppers about this in their own privacy notice and get any consent their law requires.

Payments

Apps bought directly from us. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle.com is an independent controller of the payment data it collects: your name, email, billing address, tax details and payment method. We do not receive or store your full card number. We receive from Paddle your customer and subscription identifiers, the app and plan, the status, billing period dates, country and email. Paddle's use of your data is described in its privacy notice and the Buyer Terms.

Apps installed from an app store. Your platform takes the payment and keeps the payment data, under its own privacy policy. We do not receive or store your card details. The platform tells us your store identifier, the app and plan you subscribed to, and the subscription status, so we can turn the app's features on or off. Paddle is not involved.

AI features

Some features send text to AI model providers based in the United States, which process it and return the result to us.

• Support chat on popupsnap.com and in the dashboard: your messages are answered by AI. We store the messages with an identifier hashed from your IP address, browser and a daily salt, and delete them after 180 days. Emails and phone numbers are masked before a message is sent to the AI model provider.
• Marketing advisor in the popupsnap.com dashboard: the store and campaign data you ask about is sent to an AI model provider to answer you.
• Store chatbot (Popups, only if the merchant turns it on): shoppers' messages are sent to an AI model provider to write the answer and to check messages for abuse (moderation).
• Review translation (Popups): the text of product reviews is sent to an AI model provider to translate it.

How we use data and our legal bases

• To provide and secure the apps, run your account and support you (performance of a contract, and our legitimate interests).
• To take payments, prevent fraud and meet tax and accounting duties (contract, legal obligation).
• To send service emails such as receipts, trial and renewal notices and security alerts, and weekly performance reports (InstaFeed's weekly report email is on by default; you can unsubscribe from any report email) (contract, legitimate interests).
• To understand and improve how our sites and dashboards are used (legitimate interests, or consent where the law requires it).
• To send product news or offers, only where you agreed or the law allows; you can unsubscribe at any time (consent, legitimate interests).

We do not sell personal data.

Who receives data

These are the outside companies that receive personal data from our apps. Service providers that process data for us under contract are described by their role and, where we know it, their location. We name Paddle, the sign-in providers, Google Fonts and reCAPTCHA, Instagram and TikTok, and the companies that set cookies, because you deal with them directly or they collect data straight from your browser. Service providers act on our instructions (as processors). Paddle, the sign-in providers, Google Fonts and reCAPTCHA, Instagram and TikTok, and some of the advertising companies use the data under their own privacy policies.

A current list of our service providers (sub-processors) is available to merchants on request at support@popupsnap.com. If you ask us for access to your data (see Your rights), we will also tell you which of them received it.

Your store platform (Salla, Zid, Shopify or WooCommerce) is not on this list: it is an independent controller under its own privacy policy, and our apps exchange store data with it as described in What each app reads from or changes in your store. We may also disclose data where the law requires it or to protect our rights. If we are part of a merger or sale, data may transfer to the new owner under this policy.

International transfers

Our hosting provider's servers are in France. Several of our service providers process data in other countries, including the United States: for example our AI model providers, the analytics and advertising providers named in Cookies and browser storage, our content delivery network and an email provider. For transfers out of the European Economic Area we rely on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

If you or your shoppers are in Saudi Arabia, personal data is transferred and processed outside the Kingdom: on our hosting provider's servers in France and by the providers above in the countries where they operate.

Cookies and browser storage

On popupsnap.com, the help center and the blog, a banner asks which cookies you allow. You can change your choice at any time with Cookie settings at the bottom of every page. We keep your choice for 6 months in a cookie named ps_consent, then ask again. We also ask again when the list below changes. Google's tags receive your choice through Google Consent Mode.

The companies that set cookies or use browser storage on our sites once you allow them are Google (Analytics 4 and Ads), Microsoft (Clarity), Hotjar, PostHog, Meta (Pixel) and X (Pixel). They receive the data their cookies collect. Each one and its cookies are listed below.

If you visit from the European Economic Area, the United Kingdom or Switzerland, or we cannot tell where you are, only necessary cookies are used until you choose. Everywhere else all categories are on until you switch them off in the banner.

• Necessary (always on): keep you signed in and protect forms (popupsnap_session and XSRF-TOKEN, up to 30 days), remember your cookie choice (ps_consent, 6 months), remember the store platform you picked so sign-up and prices match it (ps_platform, 30 days), and remember in your browser's storage the announcements you closed and your support chat.
• Preferences: we use none at the moment.
• Statistics: Google Analytics 4 (_ga and _ga_*, 2 years), Microsoft Clarity (_clck and _clsk, up to 1 year; also used in the Product Studio dashboard), Hotjar (_hjSessionUser_* and _hjSession_*, up to 1 year) and PostHog (ph_*_posthog and browser storage, 1 year), loaded through Google Tag Manager. They show us how visitors use the site.
• Marketing: Google Ads (_gcl_au, 90 days), Meta Pixel (_fbp and _fbc, 90 days) and X Pixel (_twpid and _twsid, about 13 months), loaded through Google Tag Manager, and our own attribution cookie ps_attr (90 days). ps_attr records the page, campaign or site that brought you here, so we can tell which marketing leads to app installs. These cookies measure our ads and show our ads to people who visited us.
• In our dashboards: the same banner and choice apply. With Statistics allowed, PostHog also links its usage analytics to your account after you sign in.
• In your browser: you can also block or delete cookies in your browser settings. Some parts of the dashboards will then not work.
• On your store: our scripts use the shopper's browser storage to apply the display rules you set, for example not showing a popup again to a shopper who closed it, as described in Your store's shoppers.

How long we keep data

We keep account and store data while your account is active. When you uninstall an app or delete your account we stop syncing and delete or anonymise that app's store data after a reasonable period, except records we must keep for tax, accounting, fraud prevention or legal claims. Aggregated statistics that no longer identify anyone may be kept. Specific periods: support chat messages 180 days; server logs with IP addresses 14 days; unordered Product Studio designs 24 hours; Product Studio activity logs 90 days; deletion requests are completed within 30 days.

Security

We use encryption in transit (HTTPS), one-way hashing of the passwords we hold, access-restricted databases and monitoring. No system is completely secure, so we cannot guarantee absolute security. We recommend strong, unique passwords.

Your rights

Depending on where you live (including under the GDPR, the UK GDPR and the Saudi Personal Data Protection Law), you may have the right to access, correct, delete or export your personal data, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority. Email support@popupsnap.com from the address on your account. Shoppers should contact the store first, since the store is the controller of their data; we help the store answer. For payment data held by Paddle or by your platform, you can also contact them. Our PDPL compliance is described on the data protection page (Arabic).

GDPR: your rights in the UK, EU and EEA

Grovlix LTD is established in the United Kingdom, so the UK GDPR and the Data Protection Act 2018 apply to the personal data we control; users in the EEA keep equivalent rights under the EU GDPR. You have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected (rectification);
• have your data erased ("right to be forgotten"), unless we must keep it by law;
• receive your data in a structured, machine-readable form and have it transferred to another provider (portability);
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw consent at any time, without affecting what happened before.

We may ask you to confirm your identity and will answer within one month, as Article 12(3) of the GDPR requires. For complex or numerous requests the law allows us to extend that period by up to two further months; if we do, we will tell you within the first month and explain why. You also have the right to complain to the supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ICO), ico.org.uk, or the authority in the EEA country where you live or work.

Children

Our apps are for businesses and are not directed to people under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will tell you about material changes by email or with a notice in the dashboard. If you keep using the apps after an update, the updated policy applies.

Language

This policy is written in English and translated into Arabic. If the two versions differ, the English version governs.

Contact us

• Email: support@popupsnap.com
• WhatsApp: contact us on WhatsApp
• Data controller: Grovlix LTD, a company registered in England and Wales (company number 17552126), Suite 2309, 60 Tottenham Court Road, Area 1/1, Fitzrovia, London, W1T 2EW, United Kingdom

See also the Terms of Service and Refund Policy.