Privacy Policy

This Privacy Policy describes how Wezy ("we", "us", or "our") collects, uses, and shares personal information when you install or use any of our Shopify applications, including but not limited to:

• Wezy Wholesale & Volume Discounts — B2B pricing, volume discounts, and checkout validation.
• Wezy Request Quote, Hide Price — Hide product prices, collect quote requests, negotiate with customers, and manage draft orders.

By installing or using any Wezy application, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Store & Merchant Information

When you install a Wezy app, we access information from your Shopify store through Shopify's API, including:

• Store name, domain, and contact email
• Product and collection data (titles, prices, tags, vendors)
• Order and draft order information
• Current Shopify plan information

1.2 Customer Information

When end-customers interact with our storefront widgets (e.g., quote request forms, registration forms), we may collect:

• Name, email address, phone number
• Company name and shipping address
• Messages and custom form field responses
• Uploaded files (documents, images) via quote request forms

1.3 Automatically Collected Data

• Browser type and IP address (for spam protection via Cloudflare Turnstile)
• App usage data (features used, pages visited within the admin interface)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services — processing quote requests, managing pricing rules, creating draft orders, and sending email notifications.
• AI-powered features — our AI Lead Scoring feature analyzes quote request data (message content, form completeness, email patterns) to generate a lead quality score. This processing is automated and does not involve human review of individual submissions.
• Negotiation Portal — storing conversation history between merchants and their customers for price negotiation purposes.
• Communication — sending transactional emails (quote confirmations, offer notifications, status updates) on behalf of the merchant.
• Spam protection — verifying form submissions using Cloudflare Turnstile.
• Improve our services — understanding usage patterns to enhance app features and performance.
• Billing — managing subscriptions through Shopify's billing system.

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We may share data with:

• Shopify — as required to operate within the Shopify platform (API calls, billing).
• Cloudflare — for Turnstile anti-spam verification (IP address and browser fingerprint only).
• Email delivery services — to send transactional email notifications configured by the merchant (SMTP providers selected by the merchant).
• Webhook endpoints — if the merchant configures CRM integrations (e.g., Zapier, Make), quote data is sent to endpoints defined and controlled by the merchant.
• AI processing — quote data may be processed by third-party AI services for lead scoring. No personally identifiable information is retained by these services beyond the processing request.

4. Data Retention

We retain merchant and customer data for as long as the app is installed on the store. When a merchant uninstalls a Wezy app:

• All store-specific data (rules, quotes, form configurations, email templates) is permanently deleted within 30 days.
• Uploaded files associated with quote requests are deleted immediately.
• Anonymized, aggregated analytics data may be retained for service improvement purposes.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Secure, encrypted database connections
• Shop-scoped data isolation (merchants can only access their own data)
• HMAC-SHA256 signed webhook payloads
• Input validation and XSS protection on all user inputs

6. GDPR & Your Rights

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — request limitation of data processing.
• Right to data portability — request your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.

Our apps include an optional GDPR consent checkbox on storefront forms, allowing merchants to comply with local privacy regulations. Merchants are responsible for enabling this feature as required by their jurisdiction.

To exercise any of these rights, please contact us at support@wezy.app.

7. CCPA (California Residents)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

To make a request, contact us at support@wezy.app.

8. Cookies

Our Shopify applications do not use tracking cookies. Session data required for app functionality is managed through Shopify's authentication system. If Cloudflare Turnstile is enabled, it may set cookies necessary for bot detection.

9. Children's Privacy

Our services are not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of significant changes through the app dashboard or via email. Continued use of our apps after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: