Legal

Privacy Policy

Last updated 21 October 2026

This policy explains what information the TracePoll: Attribution Survey app (“the App”), operated by Groowing Company Limited (“we”), collects when a merchant installs it on a Shopify store, and how that information is used.

Information we collect

• Store information: the store's myshopify domain, the access token Shopify issues to the App, the selected plan and app settings.
• Order information (from Shopify webhooks): order ID, order total and currency, creation date, landing page and referring site (including UTM parameters), discount codes used, the IDs of the products ordered, whether it was the customer's first order, and later refund amounts and cancellation.
• Survey answers given by the store's customers after checkout or from the survey link in their order email: the selected answers, optional free-text replies, optional 0–10 recommendation and 1–5 star scores, the language, and where the answer was given (checkout or email).
• A one-way hashed customer ID (SHA-256 of the store and Shopify customer ID), used to group a customer's orders for customer-value reports and to honour deletion requests. We do not store customer names, email addresses, phone numbers, postal addresses or payment details.
• Integration credentials the merchant enters (for example a Google Analytics key). These are encrypted at rest (AES-256-GCM).
• Ad spend the merchant imports, and, when ad platform connections are available, the access credentials (encrypted at rest), the chosen ad account and its daily spend totals. No ad audience or customer data is read.
• Email addresses the merchant enters to receive the weekly report (the merchant's own staff, not customers). These are encrypted at rest and used only to send that report.

How we use it

• To show the survey on the store's Thank you and Order status pages, and on the survey page linked from the store's order emails, and to record answers.
• To build attribution reports for the merchant (answers, revenue and average order value by channel, customer value, NPS, return on ad spend).
• To send answers to tools the merchant connects (Google Analytics 4, Shopify Flow, Slack, the merchant's own Google Sheet or webhook URL). The App does not read or send customer email addresses.
• To produce optional AI summaries of free-text answers for the merchant (processed by Cloudflare Workers AI; not used to train models by us).
• To email the weekly report to the addresses the merchant chooses, sent through Resend.
• When a merchant shares a store's reports with another store they manage (by entering a code in the App), to show that store's report totals to the other store. Either store can stop sharing at any time; sharing ends automatically when either store uninstalls the App.
• To publish anonymous benchmarks: the median share of each channel across at least 10 stores. Only aggregates are shown; no store's own figures are ever shown to another store.
• When a merchant creates a read-only report link, to show that store's report totals to anyone who has the link, until the merchant turns the link off.
• For billing through Shopify, support and keeping the service secure.

We do not sell personal information and do not use it for advertising.

Where data is stored and who processes it

Data is stored and processed on Cloudflare (Workers, D1, KV, Queues, R2, Workers AI). Weekly report emails are sent through Resend. Shopify processes store, order and billing data under its own policies. Data is sent to third-party tools only when the merchant connects them.

Retention and deletion

• When the App is uninstalled, its access token is deleted immediately. Shopify then sends a shop redaction request, after which we delete all of the store's data.
• We honour Shopify's GDPR webhooks: customer data requests, customer redaction (deleting that customer's answers and the listed orders) and shop redaction.
• Merchants can disconnect integrations, revoke API keys and remove ad-spend data at any time from the App.

Your rights

Customers of a store should contact that store first; the merchant controls the data and can ask us to access, correct or delete it. Merchants can contact us at support@tracepoll.com.

Contact

Groowing Company Limited, Viet A Building, Duy Tan Street, Cau Giay, Hanoi, Vietnam. Email: support@tracepoll.com.