Privacy Policy
What our apps and website collect, why, how long we keep it, and your rights.
Read the policy- Home
- Trust Center
Built to be trusted with your store.
How we protect your store and your customers’ data, from privacy and security to Shopify’s data rules and AI, with the document behind each part.
In numbers
- 0Cookies set by ebazoo.com. Visits are counted without them.
- 3Shopify privacy requests, answered by every one of our apps.
- 30Days at most until a store’s data is deleted after it uninstalls.
Privacy
Your privacy, by design.
We collect only what a feature needs, never sell it, and delete it when it’s no longer needed.
Cookie Policy
What our website, Help Center and apps store on your device. On ebazoo.com: no cookies at all.
Read the policyData Processing Agreement
How we process your customers’ personal data as your processor, under GDPR and similar laws.
Read the agreementSub-processors
The companies that help us run the apps, what they do and what data they see.
See the listSecurity
Security, built in.
The same protections in every app, from the first line of code.
- Signed in through ShopifyShopify session tokens on every request, Shopify’s expiring tokens for store access. No merchant passwords.
- Encrypted secretsStore tokens, API keys and push credentials encrypted with a dedicated key. HTTPS everywhere.
- Every store kept apartEach store’s data is fenced off from every other store’s, and automated tests check it.
- Verified webhooksEvery message from Shopify is signature-checked, processed once and trimmed to what a feature needs.
- Built for abuseRate limits on requests, printing and sign-in. Every request validated.
- Roles and an audit trailTeam roles and a log of design, publishing and billing changes in Mobile App Builder.
Security
How we protect your store’s data, the access each app asks for, and how to report an issue.
See howVulnerability Reporting
Found a security issue? What’s in scope, how to report it, and what we promise in return.
Report an issueShopify’s data rules
Inside Shopify’s rules for customer data.
Shopify grants access to customers’ details in levels. Each app asks for the least it needs, and keeps less.
| App | Protected customer data it asks for | Customer details it keeps |
|---|---|---|
| Mobile App Builder | Level 1 for orders placed in your app. Shopper sign-in asks for Level 2 fields on the shopper’s phone. | None. Sign-in, profile and order history stay between Shopify and the shopper’s phone. |
| Pick List | Level 1 (orders). | None. |
| Pickup Label | Level 1, plus the Name field for the label. | The name, in label files deleted within 10 minutes. |
| SEO 404 Redirect | None. It reads no orders or customers. | None. |
Every app answers Shopify’s three privacy requests (a customer’s data, erasing a customer, deleting a store), as the Legal hub explains.
AI
AI that works on your catalog, not your customers.
Catalog and brand only
AI features see product, collection and brand facts. Never customers, orders or staff.
Not used for training
Our AI providers don’t train their models on what our apps send them.
Drafts until you publish
AI results are checked against strict rules and saved as drafts for you to review.
Tools on a short leash
Keys for AI tools you connect can only make drafts, and expire after 30 days.
Where data lives
Who helps us, and where.
eBazoo is based in Lahore, Pakistan. When data leaves the UK or the EU, our Data Processing Agreement applies the standard contractual clauses.
- Our serversAWS, DigitalOcean, HostingerUnited States and Europe
- Network and websiteCloudflareGlobal
- AI modelsAnthropic, OpenAIUnited States
- Push notificationsGoogle FirebaseGlobal
- EmailZohoUnited States
- Mobile app buildsCodemagicUnited States
The full sub-processors list shows what each one does and which data it sees.
Documents
Every policy and agreement.
Privacy Policy
What our apps and website collect, why, how long we keep it, and your rights.
Read the policyTerms of Service
Plans and billing through Shopify, cancelling, mobile app publishing, AI features and fair use.
Read the termsCookie Policy
What our website, Help Center and apps store on your device. On ebazoo.com: no cookies at all.
Read the policyData Processing Agreement
How we process your customers’ personal data as your processor, under GDPR and similar laws.
Read the agreementSecurity
How we protect your store’s data, the access each app asks for, and how to report an issue.
See howVulnerability Reporting
Found a security issue? What’s in scope, how to report it, and what we promise in return.
Report an issueSub-processors
The companies that help us run the apps, what they do and what data they see.
See the listAPI Terms
The terms for connecting software to our apps: AI tools, webhooks and API keys.
Read the termsReviewing us for your business?
Send us your security questionnaire, ask for a signed Data Processing Agreement, or ask anything about how we handle data.