Privacy Policy.

01Who we are

eBazoo Technologies (“eBazoo”, “we”, “us”), a sole proprietorship, makes apps for Shopify merchants: Mobile App Builder, Pick List, Pickup Label and SEO 404 Redirect.

This policy covers ebazoo.com, our apps, and the eBazoo Demo app, where merchants preview a mobile app of their store before they install Mobile App Builder.

• When we’re the controller: for data about you as a merchant, a website visitor or someone who writes to us, we decide how it’s used.
• When we’re the processor: for data in your store that our apps handle for you, such as orders and shopper details, you’re the controller. We process it only to run the apps you installed, following your instructions and this policy.

Shopify’s own privacy policy covers the data Shopify itself handles.

Business address: Lahore, Pakistan.

02Data we collect

When you install one of our apps

Shopify shares your store’s details with the app, such as its name, domain, contact email, time zone and Shopify plan. It also gives the app an access token limited to the permissions you approved. We use these details to set up your account, bill you through Shopify and contact you about the app.

When you use the app

Each app reads the store data its features need, and stores what you create in it: settings, designs, templates, rules and history. Section 03 lists what each app uses.

When you contact us

We keep the messages you send through Help & Support in an app, by email or through the contact form: your name, email address, store address and what you wrote, plus our replies. For the contact form we also keep the IP address and type of browser the message came from, for 12 months, to protect the form from spam and abuse.

When you try the eBazoo Demo app

To build a demo of your store, the Demo app asks for your store’s web address, your name, email address and phone number, and your consent to be contacted. We confirm your email with a one-time code, which also signs you in to “My demos”. If you ask for your real app, we keep that request so we can follow up.

When you visit ebazoo.com

We count page views with privacy-friendly analytics that use no cookies and don’t identify you: the page, the site that sent you, your country and your type of device. If you join the launch list or the newsletter, we keep your email address, the list you joined, what you agreed to and when, when you confirmed your address, and the IP addresses you signed up and confirmed from, as the record of your consent. We first email you a link to confirm it was you. After that we only send what you signed up for: one email per app launch, or the newsletter once a month. Every email has a link to unsubscribe, and you can unsubscribe at any time.

03Data each app uses

Every app asks Shopify only for the permissions its features need. Here’s what that means in practice.

Mobile App Builder can also connect to services you choose, such as Klaviyo or Judge.me. The connection uses your own account with them, and their terms and privacy policy apply to what they receive.

04How we use data

We use data to:

• run the apps you installed and the features you turn on;
• bill you through Shopify and apply your plan;
• answer your questions and send the emails you asked for, such as SEO 404 Redirect’s weekly summary;
• tell you about changes to an app, your plan or this policy;
• keep our apps secure, and find and fix problems;
• understand how our apps are used, from counts and totals, so we can improve them;
• meet our legal obligations.

Where data protection law asks for a legal basis, we rely on our contract with you (to run the apps), our legitimate interests (security, support and improving the apps), your consent (the launch list and newsletter, demos and shoppers’ analytics in mobile apps), and legal obligations.

We don’t sell personal data, use it for advertising, or build profiles of shoppers.

05AI features

Some features use AI models from the providers listed on our sub-processors page:

• Mobile App Builder designs your app, suggests changes and translates its text. It sends your shop name and description, brand colours, and product and collection titles, types, tags, prices and images. It reads your public homepage only if you allow it.
• SEO 404 Redirect (Business plan) suggests redirects. It sends the broken address, the page that linked to it, and the titles and addresses of candidate pages in your store.

We never send customers, orders or staff details to an AI provider. The providers don’t use this data to train their models. In Mobile App Builder you choose how long AI requests and results are kept (90 days unless you change it). AI results are drafts: nothing is published until you review it.

06Shoppers in your mobile app

If you publish an app with Mobile App Builder, you’re the controller of your shoppers’ data, and your app’s privacy policy should explain how you use it. What our part of the app does:

• Usage analytics are off until the shopper agrees. They use a random identifier and a fixed list of events, such as screen views and add to cart, and never a name or email address.
• Push notifications need the shopper’s permission on their phone. We keep the device’s push token to send your campaigns.
• Sign-in and orders go through Shopify’s customer accounts. The shopper’s profile and order history are read on their phone and never reach our servers.
• Checkout is Shopify’s own checkout, inside the app.
• Wishlists are saved on the shopper’s phone.

Shoppers who want to see or delete their data should contact the store. When Shopify passes their request to us, we answer it for you (see section 11).

07Who we share it with

• Sub-processors that help us run the apps, such as hosting, email, push notifications and AI. Each gets only what its job needs, under a contract that protects it. They’re listed on our sub-processors page, which we update before we add a new one.
• Shopify, as the platform our apps run on, for billing and the changes you ask an app to make in your store.
• Authorities, only when the law requires it, and only what it requires.
• A buyer or successor, if eBazoo is ever merged or sold, under this policy. We’d tell you first.

For the personal data we process on your behalf, our Data Processing Agreement sets out our duties as your processor.

08How long we keep it

We keep data only as long as a feature needs it. Scheduled jobs delete it every night.

We keep billing records for as long as tax law requires.

09How we protect it

Our apps sign you in through Shopify, encrypt access tokens and keys, keep every store’s data apart, verify every message from Shopify and use HTTPS everywhere. Our security page explains how.

If a breach ever affects your data, we’ll tell you without undue delay, and we’ll tell the authorities where the law requires.

10International transfers

Some of our providers process data outside your country. Our AI providers, for example, are based in the United States. When data leaves the UK or the European Economic Area, we rely on safeguards such as the European Commission’s standard contractual clauses in our providers’ data processing agreements.

Our own servers are hosted by Amazon Web Services (AWS), DigitalOcean and Hostinger, in the United States and Europe. Our sub-processors page lists every provider and where it processes data.

11Your rights

Depending on where you live, you can ask us to:

• tell you what data we hold about you, and give you a copy;
• correct it;
• delete it;
• stop or limit how we use it, or object to a use;
• send it to you or another company in a common format.

Write to hello@ebazoo.com with “Privacy request” in the subject. We’ll confirm who you are, then reply within one month. You can also complain to your local data protection authority.

Requests through Shopify

Shopify passes shoppers’ requests and store deletions to every app a store uses, and each of our apps answers them:

• A shopper asks for their data: we tell the store what we hold about that shopper, which is usually nothing.
• A shopper asks to be erased: we delete anything linked to them, including cached pickup labels.
• A store uninstalls: Shopify asks us to delete the store’s data, and we delete all of it.

12Cookies

• ebazoo.com sets no cookies and uses no tracking pixels. Our analytics count visits without them.
• Our apps inside Shopify admin sign you in with Shopify’s session tokens, not cookies.
• SEO 404 Redirect’s tracker on your storefront sets no cookies and stores no IP addresses.
• Mobile apps built with Mobile App Builder use no cookies. Analytics wait for the shopper’s consent.

Our Cookie Policy lists everything our website and apps store on a device, and how to control it.

13Children

Our apps and this website are for businesses. They’re not meant for children, and we don’t knowingly collect data from anyone under 16. If you think a child has sent us personal data, tell us and we’ll delete it.

14Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data, we tell you in the app or by email before it takes effect.

15Contact us

Questions about privacy, or about this policy: hello@ebazoo.com. Or use Help & Support in any of our apps.

eBazoo Technologies · Lahore, Pakistan