Privacy Policy | ConvertIQ AI Product Quiz

Last Updated: March 16, 2026

1. Introduction

This Privacy Policy explains how ConvertIQ - AI Conversion Engine ("ConvertIQ," "we," "us," or "our") collects, uses, stores, shares, and deletes personal and store-related information when merchants install and use our Shopify app. This policy applies to information processed through the app, including the embedded Shopify admin interface, storefront quiz interactions, product indexing features, analytics features, and AI-assisted quiz generation.

ConvertIQ is designed for Shopify merchants who want to build quizzes and show product recommendations based on customer responses. Because this service involves merchant store data and end-customer interaction data, we process data as described below.

By installing or using the app, you acknowledge this Privacy Policy. If you do not agree, do not install or use the app.

2. Who This Policy Covers

This policy covers two categories of data subjects:

  • Merchants – Shopify store owners, staff, and collaborators who install and use ConvertIQ in Shopify admin.
  • End Customers – Store visitors who interact with quizzes published by a merchant on that merchant's storefront.

For Shopify compliance and privacy law purposes, the merchant is generally the controller of their customer data, and ConvertIQ generally acts as a processor/service provider on the merchant's behalf.

3. Information We Collect

3.1 Merchant and Store Information

When a merchant installs and uses ConvertIQ, we may collect and process:

  • Shopify store domain and shop identifier
  • Shopify app installation and session details
  • Access scopes and authentication/session metadata
  • Merchant plan/subscription and app entitlement status
  • Quiz configurations and settings created by merchant users
  • Design preferences and display settings for quizzes
  • Product data needed to power recommendations (for example, product IDs, variant IDs, titles, descriptions, tags, product type, vendor, category, and variant options)
  • Operational logs needed to support reliability and debugging

3.2 End-Customer Quiz Interaction Information

When a customer interacts with a quiz, we may collect and process:

  • Quiz session identifiers
  • Quiz responses and selected options
  • Quiz progress data
  • Recommendation results shown during the session
  • Customer interaction events with recommendations
  • Session context and analytics metadata such as locale, device type, referrer, UTM tags, viewport size, and timestamps

3.3 Optional Customer Contact Fields

A merchant may configure a quiz to request customer contact details (for example email address) for lead capture or follow-up. If enabled by the merchant, such data is submitted through the quiz and processed under the merchant's instructions.

3.4 Data We Do Not Intend to Collect

ConvertIQ is not intended for collecting sensitive personal information (for example health data, government identification numbers, financial account credentials, or special-category data). Merchants should avoid requesting sensitive data in quiz questions.

4. How We Use Information

We use collected information to:

  • Provide app functionality, including quiz creation, quiz publishing, and recommendation delivery
  • Generate product matching and ranking results based on quiz answers
  • Build and maintain product indexes used for recommendation quality
  • Deliver analytics and reporting to merchants about quiz performance
  • Maintain app security, performance, and reliability
  • Respond to support requests and operational incidents
  • Meet legal and contractual obligations, including Shopify App Store requirements
  • Process required Shopify privacy/compliance webhooks and related deletion/redaction events

We do not sell personal information.

5. Legal Basis and Role Allocation

Where required by law, our legal basis may include contractual necessity, legitimate interests (such as security and service reliability), and legal compliance. For merchant customer data submitted through quizzes, merchants are responsible for establishing an appropriate legal basis and for providing notices to their customers.

6. How and When We Share Information

We share information only as needed to operate the service and comply with law, including with:

  • Shopify, when required for app operation, authentication, API access, and webhook processing
  • Infrastructure providers (for hosting, storage, and monitoring)
  • Database and search/indexing infrastructure providers used to store and query app data
  • AI service providers used for merchant-requested AI quiz generation workflows
  • Professional advisors or authorities when legally required only

We require service providers to process data under contractual restrictions and to use appropriate safeguards.

7. AI and Automated Processing Disclosure

ConvertIQ may use AI-assisted features to help merchants draft quizzes and improve content workflows. In this app version, AI generation requests may be processed through an external LLM provider. Product recommendation relevance features may also use AI-based search infrastructure.

AI outputs may be probabilistic and may require merchant review. Merchants remain responsible for reviewing quiz content before publishing and for ensuring their customer-facing content is accurate and compliant.

8. Data Retention

We retain data only as long as necessary for the purposes in this policy, including service operation, analytics, legal obligations, and dispute resolution.

Typical retention behavior:

  • Active store data is retained while the app remains installed and in use.
  • Merchants can delete certain quiz response or analytics records through app controls where provided.
  • Product indexing data are retained while recommendation features are active for the store.
  • Operational logs are retained needed for reliability and security.

9. Uninstall and Deletion Commitment

When a merchant uninstalls ConvertIQ, we initiate deletion of associated store data from our systems, including quiz sessions, quiz answers, recommendation records, quiz cart events, quiz/design configuration data, product indexing data, and related analytics associated with that store.

We also process Shopify-mandated compliance webhooks, including customers/data_request, customers/redact, and shop/redact, and handle related data export/redaction/deletion workflows according to Shopify requirements.

Please note that limited backup or log copies may persist temporarily for disaster recovery or security purposes, after which they are deleted according to our retention lifecycle.

10. Customer Data Requests, Redaction, and Deletion

For merchant customer data, the merchant is the primary contact for data subject rights requests. If you are a customer of a merchant using ConvertIQ and want to access, correct, or delete your information, please contact the merchant directly first.

If we receive a valid request directly, we may route or coordinate it with the relevant merchant unless law requires otherwise. We support Shopify compliance processes and merchant instructions for customer redaction and store-level redaction.

11. Security

We use reasonable technical and organizational measures to protect data against unauthorized access, loss, misuse, or alteration. Measures may include access controls, data isolation controls, encryption in transit, secure credential handling, and operational monitoring.

Merchants should also implement strong internal access controls and protect their Shopify admin credentials.

12. International Data Transfers

Depending on hosting and service provider locations, information may be processed in countries other than the country where the merchant or customer is located. Where required, we use appropriate transfer safeguards under applicable law.

13. Children's Privacy

ConvertIQ is a business tool for merchants and is not directed to children. We do not knowingly collect personal information directly from children for our own purposes.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or product changes. When we make material changes, we will update the "Last Updated" date and may provide additional notice where required.

15. Contact Information

For privacy-related questions, requests, or complaints, contact:

If you are submitting a Shopify compliance-related privacy request, include your Shopify store domain and relevant details so we can respond efficiently.

16. Merchant Responsibilities

Because merchants configure quiz content and decide whether to request customer details, merchants are responsible for:

  • Providing customer-facing notices and obtaining any required consent
  • Ensuring quiz questions are lawful and appropriate for their market
  • Responding to customer rights requests as controller
  • Not collecting sensitive personal data unless legally permitted and properly disclosed