Kapturize Privacy Policy

1. Who Operates Kapturize

Kapturize is operated by Kapturize, located in Victoria, British Columbia, Canada.

For merchant account, support, website, listing, and app operation data, Kapturize is responsible for the privacy practices described in this policy. For customer data processed through a merchant’s Shopify store or Kapturize campaigns, the merchant remains responsible for their own customer relationship and storefront privacy disclosures, and Kapturize processes that data to provide the app.

2. Data Kapturize Processes

Kapturize is a Shopify app that helps merchants create storefront popup campaigns, capture leads, sync leads to marketing tools, and attribute orders and revenue back to campaigns.

When a merchant installs or uses Kapturize, we may process the following data:

• Shop and app data: Shopify shop ID, shop domain, app installation/session data, billing status, app settings, campaign settings, campaign phases, templates, popup content, design settings, targeting rules, trigger settings, timers, discount settings, and integration settings.
• Customer and lead data: email addresses submitted through Kapturize campaigns, Shopify customer IDs or customer GIDs where needed to link captured leads to Shopify customers and orders, and email marketing consent status when merchants enable email capture or consent features.
• Protected fields: Kapturize does not request protected customer name, phone, or address fields for V1.
• Order and attribution data: Shopify order IDs, order timestamps, financial status, discount codes, line items, order totals, revenue values, campaign IDs, campaign phase IDs, visitor IDs, cart markers, and attribution identifiers used to connect campaign activity to orders and revenue.
• Storefront campaign activity: campaign views, clicks, closes, email submissions, CTA clicks, success events, sticky tab reopens, page type, page path, device type, timestamps, visitor identifiers, and attribution markers.
• Product, inventory, discount, theme, file, and policy data: product titles, images, prices, product links, collection data, inventory quantities, discount-code information, theme/file data for Brand Match and setup health, and store legal policy data for privacy-policy readiness checks.

3. How Kapturize Uses Data

Kapturize uses data to provide and operate the app, let merchants create and manage campaigns, capture emails and consent, create or update Shopify customers when enabled by the merchant, sync leads to merchant-enabled integrations, track campaign activity, attribute orders and revenue back to campaigns and campaign phases, display analytics in Audience, Performance, and Compare, support Brand Match and setup health, generate AI copy or AI Insights when requested, prevent abuse, debug errors, maintain reliability, and comply with legal obligations.

4. Data Sharing and Integrations

Kapturize does not sell merchant or customer personal data.

Kapturize may share data with the following service providers only as needed to provide the app:

• Shopify, to operate the embedded app, app embed, billing, webhooks, Admin API features, and App Store install flow.
• Database and infrastructure providers used to host and operate Kapturize.
• Klaviyo, Mailchimp, or Zapier when the merchant connects those integrations and chooses to sync leads or events.
• OpenAI when the merchant uses AI copy or AI Insights. Kapturize sends only the campaign content or campaign performance context needed to generate the requested output and does not intentionally send customer names, phone numbers, addresses, or raw customer profiles to OpenAI.
• Google Analytics, if enabled, to measure app listing, website, and install-funnel activity. Kapturize does not intentionally send customer emails, phone numbers, names, addresses, or raw Shopify customer records to Google Analytics.

5. Cookies and Storefront Tracking

Kapturize uses cookies, local storage, visitor identifiers, cart attribution markers, and similar technologies to control when campaigns are shown, remember suppression settings after a shopper closes or converts through a campaign, attribute campaign activity to orders, measure performance by visitor, device, page, campaign, and phase, and support reporting and troubleshooting.

Merchants are responsible for ensuring their own storefront privacy policy and consent practices disclose the use of Kapturize where required by applicable law.

6. AI Features

Kapturize may provide AI-assisted copy generation and AI Insights. AI features are used only when the merchant chooses to generate copy or insights. Kapturize does not use AI features to make automated legal, credit, employment, or similarly significant decisions about customers.

AI outputs are suggestions for merchants to review. Merchants are responsible for reviewing AI-generated copy or insights before using them.

7. Google Analytics

If Google Analytics is enabled, Kapturize may use it to understand app listing, website, and install-funnel activity. Kapturize does not intentionally send personally identifiable customer information such as email addresses, phone numbers, names, or addresses to Google Analytics.

Google explains how it uses information from sites or apps that use its services here: https://policies.google.com/technologies/partner-sites

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal data under laws such as GDPR, UK GDPR, PIPEDA, or other applicable privacy laws.

Merchants and their customers can exercise privacy rights by contacting support@kapturize.com. Customer data requests may also be submitted through Shopify’s customer data request tools, which Kapturize honors through Shopify compliance webhooks.

Kapturize data is processed and stored using infrastructure located in North America.

9. Data Retention

Kapturize keeps campaign, lead, attribution, integration, and reporting data while the app is installed or as needed to provide reporting, attribution, troubleshooting, fraud prevention, compliance, and security.

When a shop is redacted or the app is uninstalled, Kapturize deletes or anonymizes shop-specific personal data according to Shopify compliance webhook requirements and applicable law. Aggregated or anonymized campaign metrics may be retained for reporting, reliability, security, and product improvement.

10. Deletion, Redaction, and Data Requests

Kapturize supports Shopify’s mandatory compliance webhooks, including customer data requests, customer redaction requests, and shop redaction requests.

Merchants or customers may contact support@kapturize.com for privacy-related questions or requests.

11. Security

Kapturize uses reasonable administrative, technical, and organizational safeguards to protect data processed by the app. No system is perfectly secure, but Kapturize is designed to limit access to data based on operational need.

12. Changes to This Policy

Kapturize may update this Privacy Policy from time to time. The latest version will be posted at this URL with an updated “Last updated” date.

13. Contact