Post-Purchase Survey for Shopify

Privacy Policy

Last updated: 18 October 2026

This policy explains what information the Post-Purchase Survey app (“the App”), operated by Groowing Company Limited (“we”), collects when a merchant installs it on a Shopify store, and how that information is used.

Information we collect

• Store information: the store's myshopify domain, the access token Shopify issues to the App, the selected plan and app settings.
• Order information (from Shopify webhooks): order ID, order total and currency, creation date, landing page and referring site (including UTM parameters), discount codes used, the IDs of the products ordered, whether it was the customer's first order, and later refund amounts and cancellation.
• Survey answers given by the store's customers after checkout: the selected answers, optional free-text replies, optional 0–10 recommendation and 1–5 star scores, and the checkout language.
• A one-way hashed customer ID (SHA-256 of the store and Shopify customer ID), used to group a customer's orders for customer-value reports and to honour deletion requests. We do not store customer names, email addresses, phone numbers, postal addresses or payment details.
• Integration credentials the merchant enters (for example a Klaviyo or Google Analytics key). These are encrypted at rest (AES-256-GCM).
• Ad platform connections the merchant creates (Meta, Google Ads, TikTok Ads): the access credentials (encrypted at rest), the chosen ad account and its daily spend totals. No ad audience or customer data is read.
• Email addresses the merchant enters to receive the weekly report (the merchant's own staff, not customers). These are encrypted at rest and used only to send that report.

How we use it

• To show the survey on the store's Thank you and Order status pages and record answers.
• To build attribution reports for the merchant (answers, revenue and average order value by channel, NPS, return on ad spend).
• To send answers to tools the merchant connects (Klaviyo, Google Analytics 4, Shopify Flow, Slack, the merchant's own Google Sheet or webhook URL). For Klaviyo, the App reads the order's email address from Shopify at the moment of sending and does not keep it.
• To produce optional AI summaries of free-text answers for the merchant (processed by Cloudflare Workers AI; not used to train models by us).
• To email the weekly report to the addresses the merchant chooses, sent through Resend.
• When a merchant shares a store's reports with another store they manage (by entering a code in the App), to show that store's report totals to the other store. Either store can stop sharing at any time; sharing ends automatically when either store uninstalls the App.
• To publish anonymous benchmarks: the median share of each channel across at least 10 stores. Only aggregates are shown; no store's own figures are ever shown to another store.
• When a merchant creates a read-only report link, to show that store's report totals to anyone who has the link, until the merchant turns the link off.
• For billing through Shopify, support and keeping the service secure.

We do not sell personal information and do not use it for advertising.

Where data is stored and who processes it

Data is stored and processed on Cloudflare (Workers, D1, KV, Queues, R2, Workers AI). Weekly report emails are sent through Resend. Shopify processes store, order and billing data under its own policies. Data is sent to third-party tools only when the merchant connects them.

Retention and deletion

• When the App is uninstalled, its access token is deleted immediately. Shopify then sends a shop redaction request, after which we delete all of the store's data.
• We honour Shopify's GDPR webhooks: customer data requests, customer redaction (deleting that customer's answers and the listed orders) and shop redaction.
• Merchants can disconnect integrations, revoke API keys and remove ad-spend data at any time from the App.

Your rights

Customers of a store should contact that store first; the merchant controls the data and can ask us to access, correct or delete it. Merchants can contact us at support@tracepoll.com.

Contact

Groowing Company Limited, Viet A Building, Duy Tan Street, Cau Giay, Hanoi, Vietnam. Email: support@tracepoll.com.