Privacy Policy
This Privacy Policy explains how ProofPop ("ProofPop," "we," "us") handles information when a Shopify merchant ("you," "merchant") installs and uses the ProofPop app, and when visitors use this website at getproofpop.com.
ProofPop plays two different roles, and it matters which is which:
- For information about you, the merchant, we act as a data controller.
- For information about your shoppers that the widget collects on your store, we act as a data processor, handling it on your behalf and under your instructions.
1. What we collect from merchants
When you install and use ProofPop, we collect the limited information needed to run the service:
- Store details provided by Shopify when you install — such as your store domain, store name, and the plan-relevant settings needed to display and configure your campaigns.
- Your contact email, so we can reach you about your account, billing, and health alerts (for example, if your popup stops showing).
- Configuration and usage data — the campaigns, prizes, discount budgets, and settings you create, and basic operational logs we use to keep the service working and to attribute revenue.
2. What we process on your behalf
The ProofPop widget collects information from your shoppers as part of your email-capture campaigns. We process this on your behalf, as your processor:
- Shopper email addresses submitted through your popups.
- Consent records associated with those submissions (for example, that a shopper opted in, and when).
- The order and attribution data needed to connect a captured subscriber to the orders they later place, so we can show you the revenue a campaign earned.
This shopper data is written to your Shopify customer list, which remains in your store and under your control. We do not sell it, rent it, or use it to build our own marketing lists. We use it only to provide the service to you.
3. Cookies and this website
This marketing website is intentionally light. If you join the waitlist, your email address is stored so we can email you when ProofPop launches. We do not load third-party advertising or marketing trackers on this site.
The waitlist demonstration on this site stores your email in your browser and, on submission, with us solely to contact you at launch. We will email you once, at launch, and then only if you become a customer or opt in further.
4. How we use information
- To provide, configure, and maintain the ProofPop service.
- To attribute orders to campaigns so we can show you revenue and cost.
- To send you operational messages, including health alerts and billing notices.
- To respond to your support requests at support@getproofpop.com.
- To meet legal and tax obligations.
5. Sharing and subprocessors
We share information only as needed to run the service: with Shopify (the platform your store and billing live on), and with infrastructure subprocessors that host and operate ProofPop under appropriate data-protection terms. We will maintain a current list of subprocessors and make it available on request. We do not sell personal information.
6. Data retention and deletion on uninstall
We keep merchant account information for as long as your account is active and as required for legal and accounting purposes.
Because subscribers are synced to your Shopify customer list, your captured data stays with you even if you stop using ProofPop. If you uninstall, we delete or de-identify the shopper data we processed on your behalf in line with Shopify's app data-handling requirements and applicable law, except where we are required to retain certain records. You can also export your full subscriber list as a CSV at any time.
7. Your rights
Depending on where you and your shoppers are located, data-protection laws such as the GDPR and UK GDPR may grant rights to access, correct, delete, restrict, or port personal data, and to object to certain processing.
- Merchants can exercise these rights over their own data by contacting us.
- Shoppers should contact the merchant whose store collected their data, since the merchant is the controller. We will assist that merchant in responding to such requests.
ProofPop also honors Shopify's mandatory data-subject and shop-redaction requests.
8. Security
We use reasonable technical and organizational measures to protect the information we hold. No method of transmission or storage is perfectly secure, but we work to keep our footprint small and our permissions minimal.
9. Children
ProofPop is a business tool for merchants and is not directed to children. We do not knowingly collect personal information from children.
10. Changes to this policy
We may update this policy as the product or the law changes. We will revise the date above and, for material changes, take reasonable steps to notify merchants.
11. Contact
Questions about this policy or your data? Email support@getproofpop.com.