Privacy Policy — Zenith: Post Purchase Survey

Last updated: May 30, 2026

What data we collect

When a customer is shown and completes the post-purchase survey on your order confirmation (Thank you) page, we store:

• Your shop's myshopify.com domain
• The Shopify order identifier associated with the response
• The customer's survey answers — including multiple-choice and multi-select selections, NPS scores, and any open-text or comment responses they choose to write
• Order context used for your analytics: the order total and currency, the items purchased, and whether it was the customer's first order with your store
• The timestamp of the response

We do not collect customer names, email addresses, shipping or billing addresses, or payment details, and we have no Admin API access to your store's order or customer records. Because open-text and comment fields accept free input, a customer could include personal information if they choose to type it; we store these responses as written, and we recommend your questions do not ask customers for sensitive details.

How we use this data

Response and order-context data is used exclusively to populate the analytics dashboard visible to the merchant who installed the app — including response breakdowns, attribution reporting ("how customers find you"), revenue attribution, and NPS reporting. We do not share, sell, or use this data for advertising or for any purpose other than displaying it to the merchant.

Service providers

We rely on third-party infrastructure providers that process data on our behalf solely to operate the service: Railway, for application hosting and database storage, and Sentry, for error monitoring. Error reports sent to Sentry may include technical and diagnostic information — such as your shop's domain and details of the failed request — when a problem occurs. These providers are permitted to use the data only to provide their services to us.

Data retention and deletion

All survey and order-context data for a shop is deleted when the app is uninstalled, within the timeframe of Shopify's shop redaction process (approximately 48 hours after uninstall). Merchants can export their response data at any time from the dashboard. A customer who wants a specific response removed can contact the merchant, who can delete it from their dashboard, or contact us directly.

GDPR and data requests

We process customer data requests and erasure requests in accordance with Shopify's mandatory privacy webhooks. The data we store is linked to a Shopify order and may relate to an identifiable customer, so it can constitute personal data even though we hold no names or contact details directly. Because we hold no direct contact information and the relevant data is available to the merchant in their dashboard, customer data requests are fulfilled by the merchant as the data controller. When we receive an erasure (customer redaction) request, we delete the survey responses and the associated order context for the supplied order identifiers. Shop-level redaction, triggered when the app is uninstalled, deletes all stored data for the shop.

Contact

Questions about this policy or data deletion requests can be sent to the developer via the Shopify Partner contact listed on our app listing.