Privacy Policy

1. Who This Privacy Policy Applies To

This Privacy Policy applies to:

• Shopify merchants, store owners, administrators, and authorized users who install or use the App;
• Visitors and customers who interact with the App on a Shopify merchant’s store;
• Individuals whose information is collected through an App feature;
• Individuals who contact us regarding the App through email or support chat.

Depending on the circumstances, Banify may process information for different purposes. For information relating to our operation and support of the App, Banify may act as an independent controller where applicable.

When the App processes customer information on behalf of a Shopify merchant, Banify generally processes that information to provide the App’s functionality to that merchant. The merchant remains responsible for its relationship with its customers and for providing any required privacy notices.

2. Information We Collect and Process

The information processed by the App depends on the features, campaigns, settings, and integrations enabled by the merchant.

2.1 Merchant and Store Information

When a merchant installs or uses the App, we may collect or process information necessary to provide and maintain the App, including:

• Shopify store information and identifiers;
• Store domain information;
• Merchant or administrator contact information made available to us through Shopify or the App;
• App settings and campaign configurations;
• Popup templates, design settings, and display rules;
• Integration settings;
• Information necessary to authenticate and maintain the App’s connection with Shopify.

2.2 Store and Campaign Information

Depending on the App features used, we may process information such as:

• Products and collections used for campaign targeting;
• Discount codes and promotional settings;
• Store localization or regional settings;
• Campaign display conditions;
• Popup configuration and customization settings;
• Other store information reasonably necessary to provide an enabled feature.

2.3 Customer Information

When a visitor interacts with a popup, form, or campaign displayed through the App, the merchant may choose to collect information including:

• Email address;
• Phone number;
• Name, where requested through an enabled form;
• Form submission information;
• Campaign or popup interaction information.

Phone numbers collected through the App may be stored on behalf of the merchant. The App does not currently send SMS messages.

Banify does not use customer email addresses, phone numbers, or other customer information collected through a merchant’s store for Banify’ own advertising or marketing purposes.

2.4 Popup and Interaction Data

The App may process information relating to how visitors interact with campaigns and features, including:

• Popup impressions;
• Popup views;
• Form submissions;
• Clicks and interactions;
• Campaign conversions;
• Popup dismissals;
• Other events necessary to provide campaign analytics and functionality.

This information may be used to provide analytics and performance information to the relevant Shopify merchant.

2.5 Technical, Device, and Session Information

We may process certain technical information as reasonably necessary to operate the App and its features. Depending on the feature, this may include:

• IP address;
• Browser information;
• Device or operating system information;
• Session identifiers;
• Cookie or similar technology identifiers;
• Technical logs;
• Error and diagnostic information.

2.6 Location Information

Where supported by the App and enabled through campaign targeting, approximate location information, such as a visitor’s country or region, may be determined or processed to provide geographic targeting functionality.

We do not collect precise GPS location data through the App.

3. How We Use Information

We use information only as reasonably necessary to provide, maintain, secure, support, and improve the App.

This may include:

Providing App Functionality

• Displaying popups, embedded forms, teasers, display bars, and other campaigns;
• Collecting email addresses, phone numbers, names, and other information requested through merchant-configured forms;
• Applying campaign settings and display rules;
• Preventing campaigns from being displayed repeatedly where applicable;
• Providing gamified campaigns and other enabled features;
• Creating or applying discounts where applicable;
• Providing campaign analytics and performance information.

Integrations

Where a merchant connects an integration, we may transmit relevant information to the selected third-party service as necessary to provide that integration.

Analytics and Performance

We may process campaign and interaction information to provide merchants with information about:

• Campaign views;
• Submissions;
• Conversions;
• Interactions;
• Feature performance.

We may also process necessary technical and operational information to maintain, troubleshoot, secure, and improve the App.

Support

We may process relevant information to:

• Respond to merchant support requests;
• Investigate technical issues;
• Troubleshoot errors;
• Maintain the security and reliability of the App.

Access to information for these purposes is restricted to authorized Banify team members and limited to the relevant information necessary.

Legal and Platform Compliance

We may process information as reasonably necessary to:

• Comply with applicable legal obligations;
• Meet applicable Shopify requirements;
• Respond to valid legal requests;
• Protect the security and integrity of the App;
• Prevent fraud, abuse, or unauthorized use.

4. Customer Data Processed on Behalf of Merchants

When a Shopify merchant uses the App to collect information from visitors or customers, Banify generally processes that information to provide the functionality requested by the merchant.

For example, a merchant may use the App to:

• Collect email subscribers;
• Collect phone numbers;
• Display discount offers;
• Show targeted campaigns;
• Synchronize subscriber information with an enabled integration.

Banify does not use customer data collected through a merchant’s store for its own independent marketing or advertising purposes.

Merchants are responsible for ensuring that their use of the App complies with applicable laws, including requirements relating to privacy notices, consent, email marketing, telephone marketing, cookies, and other data protection obligations.

5. Third-Party Services and Integrations

We use certain third-party services to operate and support the App.

Shopify

The App operates on the Shopify platform and processes information made available through Shopify and authorized by the merchant as necessary to provide the App.

OVH

Our hosting and data infrastructure uses OVH.

SendGrid and Brevo

We may use SendGrid and Brevo for email-related functionality.

Depending on the App feature and merchant configuration, these services may process relevant information necessary to provide email functionality or service-related communications.

Crisp

We use Crisp to provide customer support and chat services. Information provided during support communications may be processed to respond to and manage support requests.

Merchant-Selected Integrations

The App may support optional integrations selected and configured by the merchant, including services such as:

• Klaviyo;
• Mailchimp;
• Google Pixel;
• Other supported third-party integrations.

These integrations are activated based on the merchant’s choice and are not necessarily enabled by default.

Where a merchant chooses to connect an integration, relevant information may be transmitted to that service as necessary to provide the requested functionality.

The merchant is responsible for reviewing the privacy practices and terms of any third-party integration it chooses to use.

6. Cookies and Similar Technologies

The App may use cookies, local storage, or similar technologies to provide its functionality.

For example, these technologies may be used to:

• Remember that a visitor has already seen a popup;
• Remember that a visitor dismissed or interacted with a campaign;
• Limit how frequently a campaign is displayed;
• Prevent the same popup from repeatedly appearing to the same visitor;
• Support the operation of campaign triggers and display rules.

These technologies are primarily used to support the App’s functionality and user experience.

Banify does not use advertising or cross-site behavioral tracking technologies by default for the App’s own marketing purposes.

If a merchant enables an optional third-party integration, such as Google Pixel, that third party may use its own technologies in accordance with its applicable policies and the merchant’s configuration.

Merchants remain responsible for implementing any cookie notices or consent mechanisms required for their stores.

7. How We Share Information

We do not sell or rent personal information.

We may disclose or make information available in limited circumstances, including:

Service Providers

We may share relevant information with trusted service providers that help us operate the App, including providers for:

• Hosting and infrastructure;
• Email delivery;
• Customer support;
• Technical operations.

These providers may process information only as necessary to provide their services.

Merchant-Selected Integrations

Where a merchant activates an integration, relevant information may be transmitted to the selected service to provide the integration.

Shopify

We may exchange or process information with Shopify as necessary to operate the App and comply with applicable Shopify requirements.

Legal Requirements and Security

We may disclose information where reasonably necessary to:

• Comply with applicable laws or valid legal processes;
• Protect the security of the App;
• Investigate fraud, abuse, or security incidents;
• Protect the rights, safety, and property of Banify, merchants, users, or others.

Business Transfers

If Banify is involved in a merger, acquisition, financing, restructuring, or sale of assets, relevant information may be transferred as part of that transaction, subject to applicable law.

8. Data Security

We take reasonable and appropriate measures designed to protect information processed through the App.

Banify uses encryption and applies security and access controls intended to protect information against unauthorized access, alteration, disclosure, or loss.

Access to merchant and customer information is restricted to authorized Banify team members who require access for legitimate:

• Support;
• Technical;
• Security;
• Operational; or
• Service-related purposes.

Access is limited to the relevant data necessary to perform the specific task.

No method of data transmission or storage is completely secure. While we take appropriate measures to protect information, we cannot guarantee absolute security.

9. Data Retention and Deletion

We retain information only for as long as reasonably necessary to:

• Provide and maintain the App;
• Provide the functionality requested by the merchant;
• Maintain campaign settings and relevant service functionality;
• Comply with applicable legal obligations;
• Resolve disputes;
• Enforce applicable agreements;
• Meet applicable Shopify data handling and deletion requirements.

Retention periods may vary depending on the type of information and the purpose for which it is processed.

App Uninstallation

When a merchant uninstalls the App, we receive and process applicable Shopify app uninstallation events and handle relevant data in accordance with applicable Shopify requirements and our data deletion practices.

Privacy and Deletion Requests

We receive and handle applicable Shopify privacy-related webhooks and data deletion requests.

Relevant information will be deleted or otherwise handled in accordance with applicable legal requirements and applicable Shopify requirements.

10. International Data Transfers

The App is available to merchants and users around the world.

Information may be processed or stored in countries other than the country in which an individual is located, including through our hosting and service providers.

Where applicable law requires safeguards for international transfers of personal information, we will take appropriate steps to support lawful transfers and protect information in accordance with applicable requirements.

11. Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include the right to:

• Access personal information;
• Correct inaccurate or incomplete information;
• Request deletion of personal information;
• Request restriction of certain processing;
• Object to certain processing where applicable;
• Request portability of certain information;
• Withdraw consent where processing is based on consent.

To exercise applicable rights, contact us using the contact information below.

We may need to verify your identity and authority before responding to certain requests.

European Economic Area, United Kingdom, and Switzerland

Individuals located in the EEA, UK, or Switzerland may have additional rights under applicable data protection laws.

Where Banify processes customer information on behalf of a Shopify merchant, the merchant may be the appropriate contact for certain customer privacy requests. We may assist the merchant with applicable requests where required.

You may also have the right to lodge a complaint with the applicable data protection authority.

California and Other United States Residents

Depending on your state and applicable law, you may have additional privacy rights relating to your personal information, including rights to request access, deletion, or correction.

Banify does not sell personal information or use customer information collected through a merchant’s store for cross-context behavioral advertising on behalf of Banify.

12. Children’s Privacy

The App is designed for use by Shopify merchants and is not directed toward children.

We do not knowingly collect personal information directly from children in violation of applicable law.

If you believe that personal information belonging to a child has been collected through the App in circumstances that violate applicable law, please contact us so that we can review the matter and take appropriate action.

Merchants remain responsible for their own stores and for implementing any appropriate safeguards required for their customers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• The App and its functionality;
• Our data practices;
• Applicable legal or regulatory requirements;
• Security or operational practices.

When we update this Privacy Policy, we will revise the Last Updated date at the top of this page.

Where required by applicable law or appropriate based on the nature of a change, we may provide additional notice.

14. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise applicable privacy rights, you may contact Banify at:

Banify also provides 24/7 chat and email support.