Privacy policy: BOOX

1. Who we are

BOOX is an app for Shopify stores. It shows a shopper who is hesitating on a product page a popup with common questions and answers, and measures whether it helped them move toward a purchase. The app is operated by Maor Baum. Contact: booxsupport@gmail.com.

2. Information we receive from the store

• The store's address and the access key Shopify issues on install.
• Details of the products you choose: name, description and the text of the product page.
• The store's shipping and returns policies.
• Theme settings: whether BOOX is turned on, and which font is chosen.
• The settings you make in BOOX: design, questions, answers and display rules.

We do not keep names, emails or other details of the store's staff.

3. Information about the store's shoppers

The popup collects only what the store's Shopify privacy settings allow for that shopper: where consent is required, only after the shopper agreed. If a shopper declined, nothing is collected about them, and the popup still works.

• A random visit ID: it does not identify the person. It is kept only in the browser tab and is deleted when the tab is closed.
• What happened in the visit: the type of device (computer or phone), the product, whether the popup was shown, which question was clicked, clicks on the popup's buttons, and whether it was closed.
• The “Other” text: what the shopper wrote, if they wrote anything.
• A mark on the cart: the visit ID is added to the cart, so we can tell whether an order came after an answer.
• From the order: only when the order came from a visit in which the popup was answered, and only the order number, the products in it, the total and the time. No name, email, address or payment details.
• IP address: used for a moment to protect against flooding, and not stored.

4. How we use the information

• To show the popup.
• The product details and the store's policies are used to write the questions and answers automatically.
• To show the store owner, on BOOX's data page, how many shoppers saw, answered, closed and bought.

We do not sell information, do not use it for advertising, and never show one store's data to another store.

5. Who the information is shared with

• Shopify: the platform the app runs on.
• Railway: hosts the server and the database, in the USA (California).
• An AI service provider (USA): receives only the product details and the store's policies, to write the questions and answers. No information about shoppers is sent to it, and it does not use this information for training.
• Google Fonts: if a Google font is chosen for the popup, the shopper's browser loads it from there, as on any website that uses Google's fonts.

6. How long information is kept

Visit and purchase data is kept for about two years: it is deleted automatically about 24 months after the month in which it was recorded.

7. Deletion and data requests

• Uninstalling the app: all of the store's information is deleted when Shopify's deletion request arrives, about 48 hours after the uninstall.
• Copies kept for recovery: copies of the database kept to restore it after a fault are deleted within 30 days, so anything deleted from the database is gone from them by then too.
• A shopper's request to delete their data: Shopify forwards it to us. We delete the records of their orders, the “Other” text they wrote in those orders' visits, and the data requests that name them or those orders.
• A shopper's request for their data: we keep the customer number and the order numbers in the request, and send the store owner what we hold about those orders within 30 days. An answered request is kept as long as the visit data; one not answered is deleted 60 days after it arrived.

8. Security

• All communication goes over HTTPS.
• The database is reachable only by the server itself.

9. Contact

Questions, requests or complaints: booxsupport@gmail.com.

A store owner can contact us directly. A shopper is welcome to contact the store they bought from, which will pass it on to us.

10. Changes

If this policy changes, we will update the date at the top of the page.