Zoomifi - Spin Wheel Popup Privacy Policy
Zoomifi - Spin Wheel Popup is provided by Zoomifi to Shopify merchants. The app lets merchants show a spin-wheel popup, collect opted-in shopper email addresses, and issue discount codes through Shopify.
Information we access
| Data | Used for |
|---|---|
| Store name, domain, currency, and owner contact details | Installing the app, supporting the merchant, and showing the embedded admin. |
| Theme metadata | Detecting whether the OS 2.0 theme app embed is active. The app reads theme settings and does not write theme assets. |
| Discount code and price-rule data | Creating and displaying unique prize codes when a shopper wins a wheel slice. |
| Shopper email address and marketing choice, when submitted in the popup | Delivering the prize and giving the merchant the list (in the app, with CSV export). The marketing box is always unticked and optional; the spin never depends on it. When Shopify customer sync is on, the email is also added to the store's Shopify customers, marked subscribed only when the shopper ticked the box. |
| Hashed IP address, hashed user agent, and wheel-view/session tokens | Abuse prevention, duplicate-spin controls, and basic popup analytics. |
We do not sell merchant or shopper data. We do not request order access for the current app, and we do not store payment details, billing addresses, or shipping addresses.
Retention
Merchant configuration and popup records are retained while the app remains
installed. When the merchant uninstalls the app, the uninstall and
shop/redact webhooks purge store-scoped local data. Shopper
email records can also be redacted through Shopify privacy webhooks.
Protection
- All Shopify API and webhook traffic uses HTTPS.
- Shopify webhooks and app-proxy storefront requests are HMAC verified.
- Database storage runs on encrypted AWS EBS volumes.
- Access to production infrastructure is limited to authorized operators.
Subprocessors
The app uses Shopify and Amazon Web Services to provide the service. It does not send shopper emails to any other email service.
Contact
Questions or privacy requests can be sent to [email protected].