Privacy Policy

Last updated: March 12, 2026

Post Purchase Survey ("the App") is operated by Sublime Design ("we", "us", or "our"). We are committed to transparency and providing clear details about how personal data is collected, processed, and stored. This privacy policy explains our practices when you install and use the App on your Shopify store.

1. Information We Collect Through Shopify APIs

When a merchant installs the App, we access the following data through Shopify's APIs:

• Store information: Your Shopify store name, store domain, and currency code. This is used to display your dashboard and format currency values correctly.
• Session and authentication data: Shopify provides OAuth session tokens to authenticate your access to the App. These are managed through Shopify's official authentication framework.

2. Information We Collect From Merchants

Beyond what Shopify provides automatically, we store:

• Survey configuration: Your customized survey question, answer choices, feedback prompt text, and whether the survey is enabled or disabled.

We do not collect merchant contact details, billing information, or any data beyond what is described above. We do not use automated tracking, analytics, or usage logging within the App dashboard.

3. Information We Collect From Customers

When a customer completes a purchase and submits the survey on the thank-you page, we collect:

• Survey response: The attribution source the customer selected (e.g., "Google", "Instagram") and any optional feedback text they entered.
• Order reference: The Shopify order ID, order name, and order total value associated with the survey response.

We do not collect customer names, email addresses, phone numbers, shipping or billing addresses, payment details, IP addresses, or any other personally identifiable information about your customers. The App does not use cookies, pixels, tracking scripts, or any other tracking technologies on your customers' browsers.

4. How We Use Collected Information

We use the collected information solely to provide the core functionality of the App:

• Display survey analytics (response counts, source breakdowns, trends over time) within the App dashboard.
• Show individual survey responses in the Responses table.
• Enable CSV export of survey response data for the merchant.
• Fire Shopify Flow trigger events so merchants can build their own automations (e.g., email notifications when a new response is received).

We do not use collected data for advertising, profiling, marketing, or any purpose beyond the App's core features listed above.

5. Data Storage and Security

All data is stored in a secure PostgreSQL database hosted by Supabase (cloud infrastructure based in the United States) with encryption at rest and in transit. The application server is hosted on Railway (United States). Access to the database is restricted to our application servers only and is not accessible to any other parties.

6. Data Sharing

We do not sell, rent, trade, or share your data with any third parties. Data is only accessible to:

• The merchant who owns the Shopify store, through the App's authenticated dashboard.
• Our infrastructure providers (Supabase and Railway) solely as necessary to host and operate the service. These providers do not have independent access to or use of your data.

7. Data Retention and Deletion

We retain survey response data and survey configuration for as long as the App is installed on your store. When you uninstall the App, you may request complete deletion of all your data by contacting us at the email address below. We will delete all associated store data, survey configurations, and survey responses within 30 days of receiving a deletion request.

8. International Data Processing

Our servers and database infrastructure are located in the United States. If you are located outside the United States, please be aware that your data will be transferred to and processed in the United States. By installing and using the App, you consent to this transfer and processing.

9. GDPR Compliance

The App implements Shopify's mandatory GDPR webhooks:

• Customer data request: We respond to requests for customer data. Since we do not store personally identifiable customer information, these requests are acknowledged accordingly.
• Customer data erasure: We process requests to delete customer data. Since we do not link survey responses to individual customer identities, these requests are acknowledged accordingly.
• Shop data erasure: When a merchant requests shop data erasure, we delete all associated store data, survey configurations, and survey responses.

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation including the right to access, correct, or delete your personal data. To exercise these rights, please contact us using the information below.

10. Cookies and Tracking Technologies

The App does not set any cookies on your customers' browsers. The App does not use pixels, web beacons, fingerprinting, or any other tracking technologies. The App dashboard within Shopify Admin relies on Shopify's own built-in session management and does not set independent cookies.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage merchants to review this page periodically.

12. Contact Us

If you have any questions about this privacy policy, your data, or wish to submit a data deletion request, please contact us at:

Email: asad.ichaudhry@gmail.com