Privacy Policy

Who this applies to

• Merchants: the Shopify store owners and staff who install and use Vozumi.
• Customers: people who buy from a store that uses Vozumi. We don't have a relationship with customers directly; the merchant does. For customer data, we act on the merchant's behalf and only to provide Vozumi to them.

What data we use

From the store, through Shopify's API (read-only):

• Orders: order IDs and numbers, dates, amounts, line items, discount codes, refunds, payment gateway, and fulfilment status.
• Products: product and variant details and their costs.
• Abandoned checkouts: IDs and times only, to work out the checkout completion rate.
• Shipping country: the two-letter country code of each order's shipping address, to apply the merchant's shipping cost rules by country.
• Referring site: for orders that used a discount code, the website the customer came from, reduced to its domain name (for example, a coupon site), to spot discount codes being shared publicly. Shopify doesn't provide this when a shopper has declined analytics cookies.
• Customer ID: the Shopify customer ID, when a customer makes a privacy request.

We never request or store customers' names, email addresses, phone numbers or street addresses.

About the merchant and staff:

• The store's name, time zone and currency.
• The store owner's first name, to greet them in the app.
• The email address the merchant chooses for alert emails, if any.
• Shopify staff user IDs (numbers, not names) when staff mark an alert as handled or change a setting, so the activity log can show what changed.
• Anything the merchant types into Vozumi themselves, such as names of costs or notes on an order.

In the browser: Vozumi runs inside the Shopify admin and uses Shopify's session tokens to sign you in. It doesn't set advertising or tracking cookies. It may remember small display preferences (such as a chart view) in your browser's local storage; Vozumi works normally if your browser blocks this.

How we use it

Only to provide Vozumi to the merchant: to run the store's checks, show alerts and their dollar impact, calculate profit, and show the merchant's settings and activity.

We don't sell or rent data. We don't share it with advertisers. We don't use it for advertising, profiling, or making decisions about customers. We don't send it to AI models or use it to train them.

Who processes it for us

We use these service providers to run Vozumi. They process data only to provide their service to us:

• Shopify: the platform Vozumi runs on, and the source of the store's data.
• Fly.io: hosts the Vozumi app (servers in the United States).
• Neon: hosts Vozumi's database (servers in the United States).

If we add an email provider for alert emails, we'll list it here before turning email on.

We may disclose data if required by law, or to protect the security of Vozumi and its users.

Where data is stored

Vozumi's servers and database are in the United States. Data may therefore be processed outside your country, including outside Canada and the European Economic Area.

How long we keep it

• Referring sites: 35 days. If a referring site is part of an alert, it stays with that alert until the store uninstalls Vozumi or the customer asks for deletion.
• Hourly order and checkout counts: 61 days.
• Order profit records (including the shipping country): 400 days, so merchants can compare profit year on year.
• Records of customer privacy requests (the customer's Shopify ID and what we compiled for them): kept until the store uninstalls Vozumi, so the merchant can show the request was handled.
• When a merchant uninstalls Vozumi: Shopify notifies us 48 hours later, and we then delete all of that store's data. If the merchant reinstalls within those 48 hours, their data and settings are kept.

Customer privacy requests

Customers should send privacy requests to the store they bought from. Shopify passes them to us:

• Access requests: we compile what Vozumi holds about that customer's orders, and the merchant can download it from Vozumi's settings to send to the customer.
• Deletion requests: we remove the shipping country and referring site for that customer's orders. Order amounts are kept, because they are part of the store's own business records.

Security

All connections to Vozumi use HTTPS. Our database encrypts stored data, and connections to it are encrypted. The Shopify access token Vozumi uses is additionally encrypted by the app before it's stored. Access is limited to what's needed to run and support Vozumi.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, or to object to how it's used. Merchants can contact us directly. Customers should contact the store they bought from, which can ask us through Shopify.

We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, other privacy laws such as the GDPR and US state privacy laws.

Children

Vozumi is a tool for businesses and isn't directed at children.

Changes

If we change this policy, we'll update it here and change the effective date. For significant changes, we'll let merchants know in the app.

Contact

1000427704 Ontario Ltd.
Vaughan, ON L4J 8P3, Canada
support@vozumi.app