Privacy Policy

Introduction

Resparq ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information when you use our Shopify application and this website.

Information We Collect Through Our Shopify App

When merchants install our app, we collect:

• Store Information: Shop name, domain, and email address
• Order Data: For orders the store receives while the app is installed (subscription renewals are ignored), depending on how the order reached us, we may keep: the order id and number, the date it was placed and the time we processed it, the amounts (subtotal, total, tax, shipping, currency, refunds and any cancellation), the cart token, the visitor identifier of the browser that placed it, and the measurement group recorded for the order. Where the order is attributed to us, because our offer was shown or a discount code we treat as ours was used (including a code the store has configured for us), we also keep the email address or phone number on the order, the discount code, whether it was redeemed and for how much, the modal that was active at the time of the order with a snapshot of its copy, the variant that was shown, and whether the cart was a subscription. The email or phone is kept on the attribution record so the store can tell which of its orders were recovered, is shown to the store in the app and in its spreadsheet export, and lets us find the order again when a customer asks for their data or asks for it to be erased.
• App Settings: Configuration choices made within the app

From store visitors (your customers), we collect behavioral signals that carry no name or contact detail. Depending on the page, the plan and what the browser reports, they may include:

• Cart value and contents, how long the cart has been open, whether the shopper hesitated at it, and whether it holds a subscription or a promotion
• Device type (mobile or desktop), traffic source, and whether the shopper is logged in to a store account
• Page views, time on site, scroll depth, time on product pages, the page they were leaving from, and local time of day
• Coupon attempts that failed, how many times that browser has visited in the last 30 days, how often we have shown it offers in that time and whether they were ignored, and how often a cart was abandoned
• Whether they interacted with our modal
• On the Enterprise plan only, for a shopper logged in to their store account: how many orders that customer has placed with the store and how much they have spent, read from the store's Shopify records at decision time and kept with the offer decision
• A random visitor identifier stored in the visitor's own browser. It is generated by us and is not derived from any personal information. We use it to keep measurement groups stable across visits, to reuse an offer already made to that browser rather than minting another, and to key the journey records described under Data Retention. The browser also keeps, in its own storage and one cookie, the records our storefront script needs to behave consistently: when offers were shown, ignored, applied or followed to checkout and whether a purchase appears to have followed; the current offer and recently issued codes, with the ids of our matching decision records; the cart's age and abandonment history; and whether the floating reminder was dismissed, used, or already counted as seen. Some of these records are pruned after 24 hours or 30 days; the rest stay in the browser until the visitor clears them, and the purchase stamp is acted on for as long as the store's post-purchase quiet period runs. A visitor can remove all of them by clearing their browser storage and cookies. If the browser's storage cannot be written, a fresh identifier is used for each page view and still reaches us with the offer decision, and some of those records may be kept for the tab only. When that browser places an order, the identifier may be stored against that order, so for that one order it can be matched to the email or phone on it. A customer erasure request scrubs that email or phone; the identifier itself stays in our other rows until they expire, the app is uninstalled, or the order it was stored against is deleted at Shopify's instruction.

Beyond the order's email or phone described above, we do not collect customer names, shipping or billing addresses, or payment details. When Shopify sends us a customer erasure request (customers/redact), we replace the email or phone with a redaction marker on every order whose stored email or phone matches the one in the request, and delete the order records of any order Shopify lists for deletion. An order whose stored contact detail does not match the request (a phone stored in a different format, or an email changed after checkout) and which Shopify does not list is not touched by that request; contact us at privacy@resparq.ai to ask us directly. The journey and outcome rows keyed to the visitor identifier are not removed by an erasure request; they carry no contact detail. A receipt holding only the order id and the time we processed it is kept so the same order is never counted twice. When Shopify sends us a customer data request, we compile the orders we hold a conversion record for, matched by the stored email or phone or by the order ids Shopify lists, with their discount codes, and forward that list to the store within 30 days, so the store can fulfil the request from its own order records. Rows that carry no email or phone (order receipts, amounts, cart tokens, visitor identifiers, journey and outcome rows) are not compiled, and when no conversion record matches, nothing is forwarded.

Information We Collect On This Website

This section is about resparq.ai itself, the marketing site you are reading now. It is separate from the app described above, and the data does not mix.

We use Google Analytics 4 on every page of this website. It runs on all visits, including visits from the European Union, and we do not currently ask for your consent before it loads. Google Analytics sets cookies in your browser (named _ga and_ga_*) that give your browser a random identifier so repeat visits can be counted as one visitor rather than several. Through it we collect:

• Pages you viewed, when, and how long you stayed
• How you reached the site: the referring website, search engine, or the campaign tags on a link you clicked
• Approximate location (city and country level), derived from your IP address by Google
• Device, browser, operating system, and screen size
• Which buttons you click, specifically: which link out to the Shopify App Store you used and where on the page it sat, which pricing tier's button you clicked, and whether you switched the pricing display between monthly and annual
• Whether you used the abandoned cart calculator: that you started typing into it (calculator_start) and that it settled on a result (calculator_result), along with whether you changed the benchmark abandonment rate. The numbers you type into the calculator stay in your browser and are not sent to us or to Google.

We use this to understand which pages and which parts of a page lead people to our Shopify App Store listing, so we can write a better site. We do not use it to build a profile of you, we do not advertise to you based on it, and we do not sell it.

We do not ask for your name, email address, or any other personal detail anywhere on this website, and there is nothing here to sign up for. Google processes your IP address in order to derive the approximate location described above; Google Analytics 4 does not log or store that IP address.

If you would rather not be measured, you can block it: use your browser's tracking protection or private browsing, install Google's official Google Analytics opt-out browser add-on, or use any content blocker. Blocking it changes nothing about how this website works for you. You can also delete the cookies it has already set through your browser settings.

Google deletes the event-level data from this website after 2 months and the user-level data after 14 months. Aggregated totals in our reports are kept beyond that, but they are counts, not records of any individual visit.

How We Use Information

We use collected information to:

• Provide and improve our exit intent modal service
• Personalize discount offers based on those behavioral signals
• Track conversion performance and generate analytics
• Improve our AI algorithms across all stores (using anonymized, aggregated data)

Measurement and Controlled Testing

To measure whether our app actually increases a store's sales, rather than simply claiming it does, we hold back a randomly selected share of store visitors and show them nothing at all. We then compare how often each group completes a purchase. This is the only way to tell a real effect apart from sales that would have happened anyway.

• Who is held back: currently 10% of eligible visitors, selected by a mathematical hash of the random visitor identifier described above. The same visitor stays in the same group across visits.
• What it means for that visitor: they see no modal and no offer. We collect less information about them than about other visitors, not more.
• How results are used: only as counts and rates for each group. We do not build profiles of individual shoppers, and no decision with a legal or similarly significant effect on any person is made from this data.

We may change the size of the held-back group over time as a store's traffic grows. The purpose and the categories of data involved do not change when we do.

Data Sharing

We do not sell your data. We may share information with:

• Service Providers: Hosting and infrastructure providers (Fly.io)
• Google: Website analytics only, as described above. This applies to resparq.ai, not to the app or to any merchant's store data.
• Shopify: As required for app functionality
• Legal Requirements: When required by law

Data Retention

We retain merchant data for as long as the app is installed. Upon uninstallation, we delete all store data within 48 hours as required by Shopify's data protection requirements.

Visitor journey records (the log of which of our surfaces a visitor saw and how they responded) are removed after 180 days on a daily schedule. Other behavioral data (impressions and offer decisions with the signals behind them) is kept while the app is installed, may be cleared by us in bulk but never for data younger than 30 days, and is deleted with the rest of the store's data on uninstall. Cart links are kept while the app is installed. Issued discount codes that expired unredeemed are cleared whenever we run that cleanup, whatever their age.

GDPR Compliance

For merchants and customers in the European Union:

• You have the right to access, correct, or delete your data
• You can request a copy of your data at any time
• We respond to all data requests within 30 days
• For the website analytics described above, you can stop the collection yourself at any time using any of the methods in that section

To exercise these rights, contact us at privacy@resparq.ai.

Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), secure database storage, and regular security audits.

Changes to This Policy

We may update this policy from time to time. We will notify merchants of significant changes via email or in-app notification.

Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@resparq.ai.