Privacy Policy

1. Introduction

FlexifyPOP ("we", "us", or "our") is a Shopify app developed by Flexify Ltd. This Privacy Policy explains how we collect, use, and protect information when you install and use our application.

By installing FlexifyPOP, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

FlexifyPOP collects the following data to provide its core functionality:

• Order data: Customer first name, country, product name, product price, and product image from recent orders — used to display social proof popups.
• Shop data: Your Shopify store domain, access token, and plan information.
• Widget settings: Configuration preferences you set in the admin panel.
• Email addresses: Collected via the Exit Intent popup when store visitors voluntarily submit their email.
• Analytics events: Anonymous popup impressions and click events to provide performance analytics.

3. How We Use Your Information

• Display real-time social proof notifications to your store visitors
• Provide analytics on popup performance (impressions, clicks, CTR)
• Store and apply your widget configuration preferences
• Enable exit intent email capture for your marketing efforts

We do not sell, rent, or share your data or your customers' data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored securely on Railway cloud infrastructure with PostgreSQL. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest.

Access tokens are stored securely and used only to communicate with the Shopify Admin API on your behalf.

5. Customer Data

FlexifyPOP displays only the customer's first name and country in social proof popups — never full names, email addresses, or any other personally identifiable information.

We retain order data for up to 90 days to power the social proof popups. Older records are automatically deleted.

6. GDPR & Data Subject Rights

If you or your customers are located in the European Economic Area (EEA), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data

To exercise these rights, contact us at privacy@flexify.ltd

We comply with Shopify's mandatory GDPR webhooks for customer data requests, customer data deletion, and shop data deletion.

7. Data Retention

When you uninstall FlexifyPOP, we retain your data for 30 days to allow reinstallation without data loss. After 30 days, all your store data is permanently deleted from our systems.

Exit intent emails are retained until you request deletion via privacy@flexify.ltd.

8. Third-Party Services

FlexifyPOP uses the following third-party infrastructure:

• Railway — Cloud hosting and database (railway.app)
• Shopify — E-commerce platform and API

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of any significant changes via the app admin panel. Continued use of FlexifyPOP after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@flexify.ltd
• Company: Flexify Ltd, Dhaka, Bangladesh
• App: FlexifyPOP on the Shopify App Store