Privacy Policy

Last updated: June 9, 2026

Quiz Path ("Quiz Path", "we", "us") provides a product-recommendation quiz application for Shopify stores. This policy explains what data we collect, how we use it, and the choices available to merchants and their customers. By installing or using Quiz Path, you agree to this policy.

1. Who is responsible for your data

When a merchant installs Quiz Path, the merchant is the data controller of their customers' personal data; Quiz Path acts as a data processor on the merchant's behalf. For data we collect to operate and bill the app (merchant account details), Quiz Path is the controller.

2. Data we collect

From merchants

  • Store domain, basic shop profile, and Shopify access token (to operate the app).
  • Product, order, customer, and discount data via the Shopify Admin API, used to build quizzes, recommend products, generate discounts, and attribute revenue.
  • Integration credentials you provide (e.g. Klaviyo API keys), stored securely.
  • Billing status managed through Shopify Billing.

From store visitors (quiz respondents)

  • Quiz answers and the recommended result.
  • Email address and, optionally, phone number when a visitor submits the capture form.
  • Technical and attribution data: IP address, user agent, referrer, and UTM parameters, plus a cart token to attribute purchases.

3. How we use data

  • To deliver the quiz experience and recommend relevant products.
  • To capture leads and, where configured, sync them to the merchant's Klaviyo account or send a results email.
  • To produce analytics for the merchant (starts, drop-off, conversion, revenue).
  • To generate discount codes and attribute resulting orders.
  • To operate, secure, debug, and improve the app, and to provide support.

We do not sell personal data, and we do not use it for advertising of our own.

4. Subprocessors

We share data only with services needed to run Quiz Path:

  • Shopify — platform, authentication, and billing.
  • Klaviyo — lead sync and marketing events, only when the merchant connects it.
  • Resend — transactional emails (quiz results, merchant digests).
  • Cloud hosting & database providers — to host the application and store quiz data.

5. Data retention

We retain quiz and lead data while the app is installed and as needed to provide analytics. When a store uninstalls the app, or upon a Shopify shop-redaction request, we delete that store's data. We honor Shopify's mandatory customer data-request and redaction webhooks, including anonymizing or deleting individual customer records on request.

6. Your rights

Depending on your location (e.g. GDPR/UK GDPR, CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Store visitors should contact the merchant whose store they used; merchants can contact us directly. We respond to verified requests within the timeframes required by applicable law.

7. Security

We use encryption in transit, access controls, and secure credential storage. API keys and secrets are stored server-side and never exposed to the storefront. No method of transmission or storage is completely secure, but we work to protect your data and promptly address vulnerabilities.

8. International transfers

Our subprocessors may process data in countries other than yours. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

9. Children

Quiz Path is not directed to children and we do not knowingly collect data from children under the age of 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

11. Contact

Questions or privacy requests? Email hello@jamaklab.com.