← Back to Home

Privacy Policy

Last updated: November 30, 2025

1. Introduction

Spur Popups ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our Shopify application.

2. Information We Collect

When you install and use Spur Popups, we collect:

  • Store Information: Your Shopify store domain, access tokens for API access.
  • Popup Configuration: Settings you create for your popups (headlines, colors, display options).
  • Subscriber Data: Email addresses and phone numbers submitted through your popups by your store visitors.
  • Event Data: If webhooks are enabled, we process customer browsing events (product views, add-to-cart, etc.) to send to your configured webhook endpoint.

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain the Spur Popups service
  • Display popups on your storefront
  • Store subscriber information in your dashboard
  • Create customers in your Shopify admin (with your permission)
  • Send event data to your configured webhook endpoints
  • Improve our service and fix bugs

4. Data Sharing

We do not sell, trade, or rent your data to third parties. We only share data:

  • With Shopify: To create customers and operate within the Shopify ecosystem.
  • To Your Webhooks: Event data is sent to webhook URLs you configure (e.g., Klaviyo, Omnisend).
  • Legal Requirements: If required by law or to protect our rights.

5. Data Storage & Security

Your data is stored securely using industry-standard encryption. We use:

  • HTTPS for all data transmission
  • Encrypted database storage
  • Secure Shopify OAuth authentication
  • Regular security audits

6. Data Retention

We retain your data for as long as your app is installed. When you uninstall:

  • We receive a notification from Shopify
  • Within 48 hours, all your store data, popups, and subscribers are permanently deleted
  • This process is automatic and irreversible

7. Your Rights (GDPR/CCPA)

You and your customers have the right to:

  • Access: Request a copy of stored personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of personal data
  • Portability: Export data in a machine-readable format (CSV export available)
  • Objection: Opt-out of data processing

We handle data subject requests through Shopify's compliance webhooks automatically.

8. Cookies

Our popup script uses cookies to:

  • Remember if a visitor has already seen or dismissed the popup (30-day expiry)
  • Store customer identification for event tracking (email/phone after submission)

These cookies are essential for the app to function and do not track users across websites.

9. Third-Party Services

We integrate with:

  • Shopify: For app functionality and customer management
  • Your Webhook Endpoints: Data is sent to URLs you configure

We recommend reviewing the privacy policies of any third-party services you connect.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Email: spurchatbot@gmail.com