Privacy policy

Perzaz ("we", "us") provides storefront personalization and assessment software to e-commerce merchants ("merchants"). This policy explains what we collect, why, and the choices available to you — whether you are a merchant using our app or a visitor to a merchant's store where Perzaz runs.

Data we process on merchant storefronts

When Perzaz runs on a merchant's store, we act as a service provider to that merchant and process:

• A first-party visitor identifier (a random ID stored in a cookie and local storage on the merchant's domain). It contains no personal details.
• Occupational interest signals — for example that a visitor engaged with content for nurses or firefighters — expressed as scores against a fixed, merchant-approved list of occupational categories.
• Engagement and campaign data — page views, reading behavior, UTM parameters, and advertising click identifiers where permitted.
• Purchase funnel events (add to cart, checkout) via the merchant's Shopify pixel, without payment details.

Collection respects Shopify's Customer Privacy consent signals: where consent is required and not given, we do not store or transmit this data.

Assessments and health-adjacent information

Merchants can offer wellness-style assessments built with Perzaz. We designed this feature so that Perzaz does not store your answers or scores:

• Your answers are scored in your browser; your result is shown to you on screen.
• If you request an emailed report, your score summary is transmitted directly to the merchant's email platform (such as Klaviyo) or sent as a one-time email on the merchant's behalf — and is not retained in Perzaz's database.
• We store only your occupational category (e.g. "healthcare") and a one-way cryptographic hash of your email address — never the answers, scores, or your raw email.

The merchant is the controller of any report you request; their own privacy policy governs how they use it.

Surveys

Surveys are a separate feature from assessments, and they work differently. Unlike assessment answers, survey responses are stored in Perzaz's database, alongside your email address in plain text if you provide one, and are synced to the merchant's email platform at their direction. Survey questions are written by the merchant, so what a survey asks — and therefore what is stored — is determined by the merchant rather than by us. The merchant is the controller of that data.

Data we process for merchants

• Shopify account/session data needed to operate the embedded admin.
• Credentials for the integrations a merchant connects (Klaviyo, Resend, Google Analytics, Meta), used only to operate those integrations. They are held in a database that is restricted to our service role and encrypted at rest by our hosting provider; we do not add a further layer of application-level encryption.
• Contact details submitted through our website forms (name, email, company, message) to respond to inquiries.

Retention

• Storefront event data is deleted after 90 days.
• Visitor profiles and integration credentials are kept until deletion is requested. Uninstalling Perzaz removes the merchant's session but does not by itself delete visitor profiles or stored credentials.
• We do not yet offer self-serve deletion. Email privacy@perzaz.com and we will delete the data manually within 30 days.
• The visitor ID cookie lasts up to 400 days.

Sharing

We share data only with infrastructure processors that host and operate the service (Supabase, Fly.io, Cloudflare), with the platforms a merchant chooses to connect, and where required by law. Where a merchant connects them, we send:

• Klaviyo and Resend — assessment and survey results, and the email address they are sent to, at the merchant's direction.
• Google Analytics — order and subscription-renewal purchase events, with a Google Analytics client identifier and the merchant's Shopify customer ID, so that recurring revenue appears in the merchant's own analytics.
• Meta — subscription and renewal conversion events, including a one-way hash of email, phone, name, city, state, postal code and country, a hashed customer identifier, and Meta's own advertising cookies where present.

Your choices

• Visitors: use the store's cookie/consent controls; clearing cookies removes the Perzaz identifier. Contact the merchant to exercise data rights over their records.
• Merchants: uninstalling Perzaz removes your session but does not automatically delete stored shop or visitor data. Email privacy@perzaz.com to request deletion of all shop data; we handle these requests manually within 30 days.
• Anyone: email privacy@perzaz.com with questions or requests.

Changes

We'll update this page when our practices change and revise the date above. Material changes will be announced to merchants in the app.