Privacy Policy
KazamApps ("KazamApps," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our applications, including Kazam Cart Drawer and any future apps in the KazamApps suite (each, an "App," and collectively, the "Apps"), and our website at kazamapps.com (the "Website"). By installing our Apps or using our Website, you agree to this Privacy Policy.
1. Who We Are
KazamApps is operated by Tal Yohananov, an independent app developer based in Israel. We build conversion-focused apps for Shopify merchants.
Contact:
-
Email: support@kazamapps.com
-
Website: kazamapps.com
For privacy-related inquiries, use the email above with the subject line "Privacy Inquiry."
2. What Information We Collect
We collect different types of information depending on whether you are a Shopify merchant using our App or a visitor to our Website.
2.1. Information We Collect From Shopify Merchants
When you install one of our Apps on your Shopify store, we collect the following through Shopify's APIs:
-
Shop information: your Shopify store domain (e.g., yourstore.myshopify.com), shop ID, shop name, country, currency, primary locale, and timezone.
-
Account information: the email address and name associated with your Shopify account, used for support communications.
-
Authentication data: an encrypted access token issued by Shopify, used to authenticate API requests on your behalf. We never see your Shopify password.
-
Theme metadata: information about your active Shopify theme, used to determine whether the theme app embed for our App is enabled.
We do not collect:
-
Your Shopify customer database
-
Your order history
-
Your product catalog beyond what's necessary to display in the App's builder interface (e.g., showing products you can add to upsells)
-
Your financial information or payment details
2.2. Information You Provide Directly
When you configure our Apps, you create and provide:
-
App settings: your customizations, including colors, text content, button labels, font choices, products you've selected to feature in upsells or promotions, and any other configurations you make in the App's builder.
-
Support communications: messages you send us via the in-app live chat (powered by Crisp) or email at support@kazamapps.com.
2.3. Information About Your Customers (Shoppers)
We do not collect personal data about your customers (the shoppers visiting your storefront).
Our App's storefront component runs entirely in the shopper's browser and communicates directly with Shopify's APIs (such as /cart.js) to fetch and update cart data. No shopper data is transmitted to our servers, logged, or stored anywhere by us.
This means:
-
We do not track shoppers across pages
-
We do not record which products they view
-
We do not see their cart contents on our backend
-
We do not capture analytics events from your storefront
-
We do not place tracking cookies on your shoppers' browsers from our domain
If you have specific compliance questions about disclosing our App in your store's privacy policy, please contact us.
2.4. Information We Collect From Website Visitors
When you visit kazamapps.com, our hosting provider (Wix) may automatically collect:
-
IP address
-
Browser type and version
-
Operating system
-
Pages visited and time spent on each
-
Referring website
This information is used by Wix for hosting, analytics, and security. See Wix's Privacy Policy for details on Wix's data practices.
If you contact us through forms on our Website, we collect the information you provide (typically your name, email, and message).
2.5. Cookies
Our Website uses essential cookies set by Wix to operate the site. We do not place advertising or tracking cookies on our Website beyond what Wix uses for basic functionality. Within our Apps (in the Shopify admin), we do not place any cookies on your browser.
3. How We Use Your Information
We use the information we collect for the following purposes:
-
To provide and maintain our Apps and Website, including authenticating your Shopify session, saving your settings, and rendering your customized cart drawer on your storefront.
-
To communicate with you about app updates, support requests, and important changes to our service.
-
To improve our products by understanding how merchants use our Apps. (We rely on aggregated, anonymous patterns — never on identifying individual merchants beyond support contexts.)
-
To comply with legal obligations, including responding to lawful requests from authorities and complying with Shopify's mandatory data subject request webhooks.
-
To prevent abuse and protect our service, including investigating suspected violations of our Terms of Service.
We do not sell your information. We do not use your information for advertising. We do not share your data with marketers.
4. Who We Share Information With
We share your information only with the following service providers, each of whom has agreed to protect it:
-
Fly.io — our hosting and database provider. Application data and settings are stored on Fly.io infrastructure located in Ashburn, Virginia, United States. See Fly.io's Privacy Policy.
-
Crisp — our customer support live chat provider. If you contact us via in-app chat, Crisp processes your message and contact details. See Crisp's Privacy Policy.
-
Shopify — Shopify is the platform on which our Apps run. Your interactions with our Apps occur within Shopify's infrastructure. See Shopify's Privacy Policy.
-
Wix — our website host. Wix processes information related to visits to kazamapps.com. See Wix's Privacy Policy.
We may also disclose your information when required by law, court order, or governmental request, or to enforce our Terms of Service.
We do not sell, rent, or trade your information to third parties for marketing purposes.
5. Where We Store and Process Your Data
Our primary infrastructure is hosted in the United States (Ashburn, Virginia) on Fly.io. If you are located outside the United States — including in the European Economic Area (EEA), the United Kingdom, Canada, or elsewhere — your data will be transferred to and processed in the United States.
For merchants in the EEA, UK, and Switzerland: transfers of your data to the United States are made under appropriate safeguards, including contractual provisions with our service providers that incorporate standard data protection commitments. Fly.io and our other US-based providers maintain security and privacy practices consistent with these requirements.
By installing our Apps, you acknowledge and consent to your data being transferred to and processed in the United States.
6. How Long We Keep Your Information
We retain your data only as long as necessary to provide our services and meet legal obligations:
-
App settings and merchant data: retained while your App is installed on your Shopify store. Within 48 hours of uninstalling the App, Shopify sends us a shop/redact webhook, and we delete all data associated with your shop.
-
Customer data subject requests: if a customer of yours submits a data request through Shopify's customers/data_request or customers/redact webhook, we respond as required by law. (Note: we do not currently store any customer data, so these requests typically result in a confirmation that we have nothing to delete.)
-
Support communications: retained for up to 24 months after our last interaction, to maintain context if you need follow-up help.
-
Website logs: retained by Wix per their retention policies.
You can request earlier deletion at any time — see Section 7 below.
7. Your Rights
Depending on your location, you may have rights regarding your personal data. We honor the following rights for everyone, regardless of where you are located:
-
Right to access: request a copy of the personal data we hold about you.
-
Right to correction: request that we correct inaccurate data.
-
Right to deletion: request that we delete your data. Note: uninstalling the App will trigger automatic deletion within 48 hours.
-
Right to restriction: request that we limit how we use your data.
-
Right to data portability: receive your data in a machine-readable format.
-
Right to object: object to certain types of processing.
-
Right to withdraw consent: withdraw any consent you've given us.
For residents of California (CCPA/CPRA), the EEA/UK (GDPR), Canada (PIPEDA), and other regulated jurisdictions, additional rights may apply, including the right to lodge a complaint with a supervisory authority. You always have the right to contact us first to resolve concerns.
To exercise any of these rights, email support@kazamapps.com with the subject line "Privacy Request." We will respond within 30 days.
8. Data Security
We take reasonable steps to protect your information:
-
All data in transit is encrypted using TLS/HTTPS.
-
Access tokens are stored encrypted in our database.
-
Database access is restricted to authorized personnel only.
-
We follow industry-standard security practices for application development and hosting.
-
We comply with Shopify's mandatory compliance webhooks for data deletion.
No system is 100% secure, however. If you believe your data has been compromised, contact us immediately at support@kazamapps.com.
9. Children's Privacy
Our Apps and Website are intended for business use by Shopify merchants and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
-
Update the "Last Updated" date at the top of this page
-
Post the new policy on our Website
-
For material changes, notify active merchants via email or an in-app notification
Your continued use of our Apps or Website after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions, requests, or concerns, contact us at:
Email: support@kazamapps.com Subject line: Privacy Inquiry
We aim to respond to all privacy inquiries within 5 business days, and to formal data subject requests within 30 days.