Privacy Policy

PopSmart AI Upsell & Bundles ("Service", "we", "us", or "our") is a campaign application for Shopify merchants. This Privacy Policy explains how the Service collects, uses, discloses, and safeguards information when you install and use the application.

1. Information We Collect

1.1 Store Data via Shopify API

When you install PopSmart AI Upsell & Bundles, we access the following data through the Shopify API with your explicit permission:

• Product catalog — product names, descriptions, variants, prices (including sale prices), images, tags, and custom metadata
• Order history — up to 180 days of order data including order totals, line items, and customer IDs (used for co-purchase analysis and product recommendations)
• Discount information — active discount codes, automatic discounts, and buy-X-get-Y offers
• Store settings — shop name, domain, currency, and locale

1.2 Merchant Information

We collect information you provide directly:

• Shopify store domain and admin email (via OAuth)
• Customization preferences (avatar, theme, tone of voice, trigger settings)
• Billing and subscription information (managed through Shopify's billing API)
• Support ticket communications

1.3 Visitor Behavior Data

The Service processes page-level storefront events needed to deliver campaigns and measure attributed performance, including:

• Page views and product views
• Cart additions and cart state
• Scroll depth and engagement signals
• Time spent on pages
• Exit intent signals

The Service does not require shopper contact details or payment credentials to select and render storefront campaigns. Shopify and merchant data may still be processed as described in this policy and under the permissions approved during installation.

1.4 Automated Logging

We automatically log:

• Impression events (when a campaign experience is shown)
• Click, add-to-cart, order, and attribution events used for campaign reporting
• Error logs and performance metrics (via Sentry)

2. How We Use Your Information

• Campaign delivery — deliver merchant-configured offers on the selected storefront placement
• AI-assisted copy — rewrite matched Storefront Agent messages when a merchant requests it
• Product recommendations — analyze catalog and order signals for campaign configuration and performance
• Billing and account management — calculate the applicable attributed-revenue plan band
• Merchant communications — sending performance reports, usage alerts, and operational notifications (with opt-out per category)
• Service improvement — aggregated analytics used to maintain and improve the Service

3. Third-Party Services

We use third-party services to operate PopSmart AI Upsell & Bundles, including:

• AI-assisted workflows — we use AI services for merchant-requested campaign assistance and Storefront Agent message rewriting. Data is limited to the context needed for that function.
• Email delivery — merchant emails (performance reports, billing alerts) are sent through a trusted email delivery provider.
• Cloud infrastructure — our services are hosted on secure cloud infrastructure with industry-standard protections.

These services process data only as necessary to provide their specific function and are bound by their own privacy policies and data processing agreements.

4. Data Retention

• Store data cache — continuously synced and refreshed; deleted upon app uninstall
• Order history — up to 180 days, refreshed on sync cycles
• Campaign event data — retained for attribution and performance reporting; deleted in accordance with applicable requests and retention controls
• Account data — retained while your subscription is active; deleted within 30 days of app uninstall per Shopify's shop/redact webhook

5. GDPR and Data Subject Rights

We support applicable data-subject requests and Shopify's mandatory privacy webhooks, including:

• Customer Data Request (customers/data_request) — we export all data associated with a customer within 30 days
• Customer Data Erasure (customers/redact) — we delete all customer-associated data within 30 days
• Shop Data Erasure (shop/redact) — we delete all store data after the merchant uninstalls the app

As a data processor, we act on behalf of merchants (data controllers). If a store visitor wishes to exercise their data rights, they should contact the merchant directly.

6. Data Security

We take the security of your data seriously. All data is encrypted in transit, access is restricted to authorized services only, and we follow Shopify's security best practices for app development.

7. Children's Privacy

PopSmart AI Upsell & Bundles is a B2B service for Shopify merchants. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes through an appropriate channel. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: team@popsmart.ai

• Business Operator: 매드맨스튜디오 (MadmanStudio)
• Business Registration No.: 167-79-00541
• Data Protection Contact: team@popsmart.ai

PopSmart Size Chart Fit Finder (the "App", "we", "us", or "our") is a Shopify application operated by MadmanStudio under the PopSmart brand. It helps merchants create and publish size charts, offer optional size recommendations, and understand size-and-fit activity. This section explains how the App processes personal data belonging to merchants, their staff, and shoppers.

Our role depends on the context. For Shopify customer and storefront data that we process to provide the App to a merchant, the merchant generally determines the purposes of processing and acts as the controller or business, while we act as its processor or service provider. We act as a controller for our own merchant account, billing, security, support, and legal-compliance records.

1. Information We Process

1.1 Shopify Store and Merchant Data

When a merchant installs or uses the App, Shopify provides data authorized through the App's approved access scopes:

• Store and account data — Shopify shop domain, store name, custom storefront domain, locale, currency, installation status, merchant or staff identifiers, and a notification or account-owner email address
• Catalog and storefront data — product and variant identifiers, titles, vendors, product types, tags, collections, SKUs, option values, product images, theme information, and storefront locale data used to build, assign, and render size charts
• App configuration — chart measurements and labels, product assignments, display layouts, uploaded or linked media, widget placement, language, style, consent, and notification preferences
• Billing data — plan, price, currency, billing interval, trial and subscription status, and Shopify charge identifiers. Shopify processes payment instruments; we do not receive card or bank-account details.

1.2 Protected Customer and Order Data

If Shopify approves and the merchant authorizes the relevant Level 1 protected-customer-data access, the App processes limited customer-linked data needed for fit, merchant analytics, and the optional merchant-configured size-recommendation follow-up:

• Shopify customer, order, product, and variant identifiers
• The current Shopify email-marketing consent state and the time it was observed
• Product title, vendor, purchased size, quantity, order currency, and order total
• Fulfillment timestamps, refunded-line-item size, and merchant-provided return reason or note
• Recommendation identifier and the recommended-to-purchased-size linkage
• Follow-up eligibility status, delivery event identifier, delay, and frequency reservation

The App does not request or store customer names, email addresses, phone numbers, billing or shipping addresses, or payment details through these protected order, fulfillment, refund, or follow-up workflows. For an optional follow-up, Shopify Flow resolves the customer's email from a Shopify customer reference inside the merchant's own workflow; PopSmart does not receive or store that email. These workflows operate only when Shopify has granted the App the required protected-customer-data access and the merchant has authorized the relevant scopes; otherwise they remain unavailable.

1.3 Shopper Size and Fit Information

When a shopper opens the fit finder, the App may process information the shopper chooses to provide:

• Height, weight, sizing category or gender selection, usual size, fit preference, and selected reference brand or shoe size
• The recommended size, alternatives, confidence information, and whether feedback says the recommendation was correct, too small, or too large
• A store-scoped, pseudonymous shopper identifier derived from the signed Shopify customer identifier when the shopper is logged in
• Optional post-fulfillment fit feedback and the related product, variant size, recommendation, and order identifiers

The widget uses first-party local storage on the merchant's storefront to remember entered body information and the shopper's save preference. Local-only information remains in that browser until it is replaced or the shopper clears it. If a logged-in shopper affirmatively chooses to remember measurements, the App also stores a store-scoped profile until the shopper withdraws that choice or requests deletion.

Providing size-and-fit information is optional. A shopper who does not provide it can still view the merchant's size chart, but the App cannot generate a personalized recommendation or remember a profile.

1.4 Storefront and Usage Events

Through Shopify's Web Pixel environment and the App's storefront widget, we may collect:

• Product views and cart additions, including product and variant identifiers or titles, vendor, selected size, quantity, and timestamps
• Checkout start and completion events, including order identifier, order total, and line-item count
• Widget opens, recommendation displays, recommendation-to-cart actions, size selections, placement success or failure, and random event identifiers used to prevent duplicates
• Technical request data such as origin domain, request and error identifiers, approximate network information, and service performance or security logs

These events do not include a shopper's name, email address, phone number, street address, or payment instrument. Shopify's customer-privacy settings and applicable consent signals govern the Shopify Web Pixel where required.

1.5 Smart Chart Materials

If a merchant uses Smart Chart, we process the text, image, spreadsheet, PDF, HTML table, product context, file name, and file metadata the merchant submits. Raw source files are used transiently to extract and normalize chart measurements. The material may be routed through OpenRouter to a supported model provider, including MiniMax, or processed by Google Gemini. PopSmart does not use Smart Chart material to train its own general-purpose models. Upstream model providers have their own retention and model-improvement practices, so merchants must not submit personal data, trade secrets, or other confidential material that is unnecessary to create the chart. The merchant must review the resulting draft before publishing it.

1.6 Support, Communications, and Logs

We process support-ticket subjects and messages, attachments, replies, notification preferences, email delivery identifiers, and operational communications. We also maintain authentication sessions, security and webhook logs, rate-limit counters, request identifiers, and error details needed to operate and protect the App.

2. How and Why We Use Information

• Provide the contracted service — authenticate merchants, synchronize catalog context, create and publish charts, assign charts to products, render the storefront widget, calculate recommendations, save an optional shopper profile, and provide support
• Merchant analytics — show store-scoped, aggregated size distribution, funnel, recommendation, fit-feedback, attributed-order, and return information
• Optional size-recommendation follow-up — after at least 24 hours, make a same-merchant Shopify Flow trigger eligible only when an identified customer is currently subscribed to email marketing, has not purchased the recommended product, remains within the merchant's frequency limits, and the merchant has activated the workflow. The merchant chooses whether to connect a messaging action.
• Billing and account administration — manage plan entitlements, quotas, trials, subscription lifecycle, and required operational notices through Shopify
• Security and reliability — authenticate requests and webhooks, prevent abuse and duplicates, investigate faults, and monitor service health
• Legal compliance — respond to privacy requests, preserve required transaction records, and enforce our terms
• Service improvement — evaluate de-identified or aggregated performance. We do not use one merchant's identifiable customer data to make recommendations for another merchant.

Where applicable, processing is based on performance of our agreement with the merchant, the merchant's instructions and lawful basis, the shopper's consent for an optional saved profile, our legitimate interests in securing and improving the App, and legal obligations. Size recommendations are advisory. They are not used to determine price, credit, employment, access to essential services, or another legal or similarly significant decision.

How automated recommendations work. The App compares shopper-provided size-and-fit inputs with the relevant product, merchant chart, brand, category, and statistical fit information to return a suggested size, alternatives, and confidence information. The shopper and merchant may disregard the result and use the underlying size chart instead. Choosing not to use the fit finder has no effect on the shopper's ability to buy from the merchant.

3. Service Providers and Disclosures

We disclose only the information reasonably necessary for the following providers or processing channels to perform their functions:

• Shopify — app installation and authentication, APIs, Customer Privacy and Web Pixel infrastructure, storefront extensions, Flow, and subscription billing; see Shopify's privacy policy
• Merchant-configured Klaviyo through Shopify Flow — if the merchant chooses this optional action, Shopify Flow supplies the customer email from Shopify's customer reference and sends the event properties selected by the merchant to the merchant's Klaviyo account. The merchant supplies and controls the Klaviyo public API key; PopSmart does not store it or call Klaviyo directly. Klaviyo's practices are described in Klaviyo's privacy notice.
• Railway — application, PostgreSQL database, Redis, and supporting cloud infrastructure in our configured United States region; see Railway's privacy policy
• Cloudflare R2 and Cloudflare delivery services — private transient Smart Chart source storage and global delivery of App storefront assets; see Cloudflare's privacy policy
• OpenRouter, routed model providers (including MiniMax), and Google Gemini — Smart Chart extraction and normalization when the merchant chooses the AI-assisted workflow; they receive only the submitted chart material and bounded product context needed for that task. OpenRouter's routing-layer and downstream-provider practices are described in its privacy policy and data-collection documentation; Google's practices are described in the Gemini API terms.
• Google Workspace / Gmail API — support and operational email, including delivery of customer privacy exports to the responsible merchant; see Google's privacy policy
• PopSmart's size-recommendation service — recommendation inputs and de-identified outcome data. Customer names, contact details, Shopify customer IDs, order IDs, and payment details are not included in recommendation outcome records.

We may also disclose information when required by law, to protect the App, merchants, shoppers, or others, or as part of a merger, financing, acquisition, or transfer of assets subject to appropriate confidentiality and notice. We do not sell personal information, share it for cross-context behavioral advertising, or use it for third-party advertising profiles. The App does not send protected customer data to a merchant's GA4, Meta, or Google advertising destination.

4. Retention and Deletion

We apply the following maximum periods unless earlier deletion is required by a valid request or a longer period is required by law:

• Smart Chart raw source files — normally 30 minutes and never more than 24 hours; deleted after extraction, failure, expiry, or publication. Normalized unpublished drafts expire after 7 days.
• Published chart, configuration, catalog mapping, merchant account, and subscription records — while the App is installed or needed to provide the service. Charts moved to trash are scheduled for permanent deletion after 30 days.
• Storefront and checkout pixel events — 30 days
• Recommendation outcomes without fit or purchase feedback — 90 days
• Recommendation outcomes with feedback and customer-linked order, return, contribution, or attribution analytics — 13 months
• Pending or shown fit-rating prompts — expire after 30 days and are purged within a further 30 days; answered or dismissed prompts are purged 30 days after terminal activity
• Consented shopper profile — until the shopper withdraws consent, the merchant or shopper requests erasure, or store data is erased
• Webhook audit metadata — 90 days; successful Flow delivery records are removed after delivery and dead-letter records after 7 days
• Size-recommendation follow-up — an accepted-delivery outbox record is removed after 24 hours; suppressed or dead-letter delivery records after 7 days; eligibility and frequency reservations after 30 days; and the minimal customer/order/product purchase ledger after 31 days when no pending or eligible follow-up depends on it
• Support and communication records — for as long as reasonably necessary to resolve and document the request, protect the service, and meet legal obligations
• Billing and tax records — for the period required by applicable accounting, tax, and commercial laws

Shopify customers/redact and shop/redact requests override the ordinary schedules for covered App data. Store erasure removes store-scoped database records, sessions, Smart Chart source objects, and support attachments. De-identified aggregate information that can no longer reasonably be linked to an individual or store may be retained.

When a retention period ends, we delete electronic records from active systems and object storage using automated jobs or verified administrative procedures, then allow encrypted provider backups to expire on their ordinary rotation. We do not ordinarily create paper records from App data.

5. Privacy Rights and Choices

Depending on location and applicable law, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, withdraw consent, and appeal or complain to a supervisory authority. We do not discriminate for exercising a privacy right.

• Shoppers: contact the Shopify merchant whose storefront you used. The merchant can initiate Shopify's customers/data_request or customers/redact process. You may also contact us, and we will coordinate with the merchant as needed to verify and fulfill the request.
• Marketing follow-up: unsubscribe through the merchant's message or change the Shopify marketing preference available from that merchant. The App requires Shopify's current status to be exactly subscribed before it emits the merchant-owned follow-up trigger; an unknown, unavailable, or non-subscribed status prevents delivery.
• Saved profile: turn off the save option in the widget to request deletion of the server-side profile; clear the site's local storage in your browser to remove the local copy.
• Merchants: update notification preferences in the App, uninstall the App to end future processing, or contact us for access, correction, deletion, portability, or restriction requests.

Shopify's mandatory privacy webhooks support customer access and deletion requests and deletion of store data after uninstall. We may request information reasonably necessary to verify the requester and locate the relevant store without collecting unnecessary identity fields.

6. International Transfers

We are based in the Republic of Korea. The providers in Section 3 may process information in the United States, Canada, the European Economic Area, Korea, and other locations identified in their linked policies. Our principal application, database, Redis, and batch infrastructure is currently configured in a United States Railway region.

Transfers occur over encrypted network connections when the App is installed or used, when support or privacy email is sent, and—only if the merchant invokes Smart Chart—when chart material is submitted for AI extraction. Infrastructure providers may store data continuously for the applicable period in Section 4; AI providers receive the submitted material at the time of the request and retain it, if at all, under the applicable provider configuration and terms. Where required, we rely on contractual safeguards, adequacy decisions, or another lawful transfer mechanism. A merchant can avoid the optional AI transfer by not using Smart Chart. The App cannot provide hosting, account, support, or storefront functions without the infrastructure transfers needed to operate those functions.

7. Security

We use technical and organizational safeguards appropriate to the nature of the information, including HTTPS encryption in transit, provider-managed encryption at rest, HMAC verification of Shopify webhooks, signed and short-lived storefront credentials, store and origin isolation, role-restricted service access, private object storage, rate limiting, data minimization, dependency review, and deletion workflows. No system is completely secure, and we cannot guarantee absolute security.

8. Children

The App is a business service for Shopify merchants and is not directed to children. The fit finder does not knowingly request information from children under 13. Merchants are responsible for configuring their storefront and obtaining parental or guardian authorization where a higher local age threshold or the nature of their products requires it. A parent or guardian may contact the merchant or us to request deletion.

9. Changes to This Policy

We may update this Policy to reflect product, legal, or operational changes. We will post the revised date and provide reasonable advance notice through the App or email when a change materially affects rights or our use of personal data.

10. Contact

For privacy questions or requests concerning PopSmart Size Chart Fit Finder, contact team@popsmart.ai.

• Business Operator: 매드맨스튜디오 (MadmanStudio)
• Representative and Privacy Officer: 가영근
• Business Registration No.: 167-79-00541
• Address: 서울특별시 구로구 가마산로25길 9, 202-S13호 (구로동, 네오팰리스), Republic of Korea
• Email: team@popsmart.ai