Privacy Policy - OrderSurvey← Back to OrderSurvey

Privacy Policy

Last updated: March 31, 2026

1. Introduction

OrderSurvey ("we", "our", "us") provides a post-purchase survey application for Shopify merchants. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Data We Collect

When you install and use OrderSurvey, we collect:

We do not collect customer email addresses, payment information, or personal contact details through our surveys.

3. How We Use Your Data

4. Data Sharing

We do not sell, rent, or share your data with third parties. Survey response data is only accessible to the merchant who owns the Shopify store.

5. Data Storage & Security

Data is stored in a secured PostgreSQL database hosted on Supabase. All connections use TLS encryption. Access is restricted to authenticated store owners via Shopify's OAuth flow.

6. Data Retention & Deletion

When you uninstall OrderSurvey, Shopify sends us a shop/redact webhook within 48 hours. Upon receiving this webhook, we permanently delete all data associated with your store, including surveys, survey responses, store settings, and session data.

Customers may request deletion of their personal data through their Shopify store. When we receive a customer redact request, we delete all survey responses linked to that customer's orders.

7. GDPR Compliance

We comply with GDPR requirements. We support customer data requests (access and deletion) through Shopify's mandatory webhook system. If you are an EU resident and have questions about your data, contact us at the address below.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at support@ordersurvey.com.