This Privacy Policy explains how BusinessUp ("we", "us")
handles data in connection with the Quizlab application (the
"App") for Shopify. The App adds a product-recommendation quiz to a
merchant's storefront. By installing or using the App, you agree to this Policy.
1. Data we access from the store
Using only the permission granted at installation (read products),
the App reads:
- Product data (titles, images, tags, product type, handles, online-store URLs) to recommend products at the end of a quiz.
- Your store domain and the Shopify-issued access token / session used to authenticate API requests.
The App does not request write access to your products and never modifies your catalog.
2. Data created by using the App
- Quiz configuration you author (questions, answers, results, design settings).
- Quiz responses — the answers a shopper selects, stored to produce results and aggregate analytics (for example, how many people completed a quiz).
- Shopper email — only if voluntarily provided. A shopper may choose to enter an email address to receive their quiz result by email. If they do, we store that email to deliver the result. Where the merchant has enabled it, that email and the shopper's answers may also be saved as a customer record in the merchant's Shopify store. Entering an email is optional; the quiz works fully without it. We do not collect names, addresses, payment data, or order history.
3. How we use data
- To run quizzes and generate product recommendations.
- To send a shopper their result by email, when they requested it.
- To show the merchant aggregate response analytics.
- To operate, secure, maintain and support the App.
We do not sell data, and we do not use it for advertising or profiling.
4. Legal basis (GDPR / KVKK)
Where applicable, we process data to perform our contract with the merchant
(providing the App) and, for a shopper's email, on the basis of the shopper's
own request to be emailed their result.
5. Storage, sub-processors and security
Data is stored on secured servers and databases operated on our behalf.
Access tokens are stored solely to authenticate requests to your store. We
share data only with:
- Shopify — to read the product data recommendations require, and, where enabled, to save an opted-in shopper as a customer.
- Infrastructure providers (hosting, database, and the email delivery service used to send opted-in result emails) that process data strictly to run the App on our instructions.
6. Retention and deletion
We retain the data above only for as long as the App is installed and needed
to provide the service. When you uninstall the App, or upon request, we delete
the store data and access token associated with your store. We honour Shopify's
mandatory data-erasure requests:
- customers/redact — we delete shopper data (including any stored email) tied to the identified shopper.
- customers/data_request — we return the data we hold for the identified shopper.
- shop/redact — we delete the shop's data after uninstall.
7. Your rights
Subject to applicable law (including GDPR and KVKK), you may request access
to, correction of, or deletion of the data we hold, and you may withdraw consent
by uninstalling the App or contacting us at the address below.
8. International transfers
Your data may be processed in countries other than your own. Where it is, we
take steps to ensure an appropriate level of protection consistent with this
Policy and applicable law.
9. Children
The App is intended for use by businesses and is not directed to children.
10. Changes to this Policy
We may update this Policy from time to time. Material changes will be
reflected by updating the "Last updated" date above.
11. Contact
BusinessUp
Email: tech@businessup.com.tr