Privacy Policy

Who we are

Zappush LLP is a Limited Liability Partnership registered in India, with its registered office at Desk No. WSA43, First Floor, B128, B Block, Sector 2, Noida, Uttar Pradesh 201301, India.

For any question about privacy, or to make a request about your information, write to us at [email protected]. We read everything sent there.

The two roles we play

When you are our customer

If you hold a Zappush account, we decide how your account information is handled, and this policy governs it directly. Ask us anything about it and we will answer you.

When you are a shopper on a store that uses Zappush

If you shopped at a store that has connected Zappush, we process information about you on that store's behalf. The store decides what is collected, how it is used, and where it is sent. We act on its instructions and we do not use that information for our own purposes.

If you want your information corrected or removed, contact the store you shopped with, because they hold the relationship with you. You can also write to us at [email protected]. We will pass your request to the store and act on it.

Information we collect from our customers

• Account information: your name, work email address, company name, role, and a cryptographic hash of your password. We never store your password itself.
• Workspace configuration: your store domains, the platforms you connect, the advertising accounts you connect, and your settings.
• Billing information: your plan, billing cycle, invoices, and payment status. Card and bank details go directly to our payment providers. We never see them and never store them.
• Product usage: which pages you open in the dashboard, which features you use, and what you do there, so we can see what is working and what is not.
• Support communication: the messages, attachments, and screenshots you send us.
• Technical information: your IP address, browser and device type, and log records of requests your session makes to our services.

Information we process on behalf of our customers' stores

When a store connects Zappush, the platform records what happens on that store and builds a profile for each shopper, so the store can understand its customers and measure its advertising. Depending on what the store sends us and how it has configured the platform, that can include:

• Contact details: email address, phone number, first name, and last name.
• Order information: orders, line items, quantities, values, currency, and refunds.
• Address details: city, state or region, postal code, and country.
• Behaviour on the store: pages viewed, products viewed, items added to a cart, checkouts started, purchases completed, and similar actions.
• Technical information: IP address, browser and device type, and identifiers held in cookies or local storage.
• Approximate location worked out from the IP address: country, region, city, and postal code.
• Further attributes where the store chooses to send them: date of birth, gender, and the store's own customer identifier.

We receive this through the tracking script the store installs, through the connectors the store enables, such as its e-commerce platform, and through files the store uploads itself.

We do not ask for and do not want government identifiers, payment card numbers, passwords, or health records. The platform is not built to hold them, and our agreement with our customers asks them not to send them.

How we use information

To provide the platform:

• Record what happens on a store and turn it into a usable record of each shopper.
• Recognise a returning shopper across visits and devices, so a store's reporting and customer profiles are accurate rather than counting the same person many times.
• Deliver conversion and audience data to the advertising platforms a store connects, in the form each platform requires.
• Produce the analytics, reports, and segments shown in the dashboard.

To run the business:

• Keep the service secure, and detect and prevent fraud, abuse, and unauthorised access.
• Provide support and answer questions.
• Bill for the service and keep the records the law requires us to keep.
• Send service notices, and tell customers about changes and new features. Marketing email is optional and every one of them carries an unsubscribe link.
• Improve the product, by understanding which parts of the dashboard are used and where people get stuck.

We do not sell personal information. We do not share it with anyone for their own marketing. Every customer's data is held separately from every other customer's, and we do not use one customer's data to produce results for another.

Consent

Where a store is required to obtain consent from its shoppers before tracking them, that is the store's responsibility, and its own privacy notice governs it. Zappush acts on the consent signal a store sends us. When a store tells us a shopper has not consented to marketing, we do not forward that shopper's information to advertising platforms.

Who we share information with

We share personal information only with the service providers who help us run the platform, and with the advertising platforms our customers choose to connect. Each provider is bound to use the information only to provide their service to us.

Service providers

• Google Cloud Platform: hosting, databases, storage, encryption keys, and backups for the entire platform. Processed in: United States.
• Cloudflare: content delivery and DNS in front of our services. Processed in: United States and global edge network.
• IPinfo: resolving an IP address to an approximate location. Processed in: United States.
• IPLocate: resolving an IP address to an approximate location. Processed in: United States.
• Resend: sending transactional email such as sign-in links, alerts, and account notices. Processed in: United States.
• Trigger.dev: running the background jobs behind some of our tools, including anything submitted to those tools. Processed in: United States.
• Mixpanel: measuring how account holders use the dashboard, so we can improve it. This covers our customers' own use of the product, not shoppers on their stores. Processed in: United States.
• Google Analytics, through Google Tag Manager: measuring how our own websites and public tools are used. Processed in: United States.
• Microsoft Clarity: measuring how our own websites and public tools are used. Processed in: United States.
• Google reCAPTCHA: protecting sign-up and public forms from automated abuse. Processed in: United States.
• Razorpay: processing subscription payments. Processed in: India.
• Shopify: processing subscription payments, and supplying store and order data, for customers who install Zappush from the Shopify App Store. Processed in: Canada and United States.
• Google (Gemini): reviewing advertising copy and landing pages for policy compliance, where a customer uses that feature. This processes advertising content, not shopper information. Processed in: United States.
• Groq: reviewing advertising copy and landing pages for policy compliance, where a customer uses that feature. This processes advertising content, not shopper information. Processed in: United States.

This is the current list. If we add or replace a provider that handles personal information, we update it here and in Annex B of our Data Processing Agreement, and we give our customers notice before the change takes effect.

Advertising platforms our customers connect

When a customer connects an advertising platform, we send that platform the conversion and audience data the customer has configured. Contact details are converted to an unreadable one-way value before they are sent, in the format the platform requires, so the platform receives a hash rather than an email address or a phone number.

The customer decides which platforms to connect, which events are forwarded, and can disconnect at any time. What the platform then does with the data it receives is governed by that platform's own terms and privacy policy, not by this one.

Everyone else

We may disclose information where the law requires it, where we need to enforce our agreements, or where it is necessary to protect our rights, our customers, or the public. If our business is acquired or merged, information may transfer as part of that transaction, and we will say so before it happens.

Where information is stored

The Zappush platform runs on Google Cloud Platform infrastructure in the United States. Our team accesses it from India. Some of the providers listed above process information in the locations named alongside them.

By using Zappush, you agree that your information, and the information you send us about your shoppers, may be stored and processed in these locations.

How long we keep information

While your account is active we keep your data, because the product depends on history: customer profiles, lifetime value, cohorts, and attribution all need to be able to look back. You can ask us to delete any part of it at any time. When your account closes, we delete your data within 30 days.

The full detail, including what we keep longer and why, is in our Data Retention Policy.

How we protect information

Data is encrypted in transit and at rest. Access tokens for your connected platforms are encrypted with a managed key service and bound to the record they belong to. Every read and every write in the platform is scoped to a single workspace, so one customer's data cannot be reached from another's. Access to production systems is limited to the people who need it.

Our Security page describes this in full, including what we do not claim.

Your choices and your requests

Whoever you are, you can ask us to:

• Tell you what information we hold about you.
• Correct anything that is wrong.
• Give you a copy of it in a portable format.
• Delete it.
• Stop sending you marketing email, which you can also do from the unsubscribe link in any of them.
• Close your account entirely.

Write to [email protected] from an address associated with your account, or tell us enough for us to find you. We will confirm what you are asking for before we act on anything irreversible, and we will respond within 30 days. There is no charge.

If you are a shopper on a store that uses Zappush, we will route your request to that store and act on it, as described above.

Privacy mode

Some of our customers cannot have their shoppers' contact details held in readable form by an outside party. For them we offer privacy mode, which converts identifying details to an unreadable one-way value the moment they arrive, so no readable name, email address, or phone number is ever written to disk. The platform still recognises a returning shopper and still reports accurately.

Privacy mode is set up with our support team rather than from a toggle, because it changes what some features can do. Write to [email protected] if you want to talk about it.

Cookies and similar technologies

On our own websites we use cookies to keep you signed in, to remember your preferences, and to understand how the site is used.

On our customers' stores, Zappush sets a first-party identifier so the store can recognise a returning shopper. That identifier belongs to the store, is set under the store's own domain, and is covered by the store's cookie notice rather than by this policy. Clearing your browser's cookies and site data for that store removes it.

Children

The platform is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child's information has reached us, write to [email protected] and we will remove it.

Changes to this policy

We may update this policy to reflect changes in what we do, in the providers we use, or in the law. When we do, we update the date at the top of this page. If a change materially affects how we handle your information, we will tell our customers by email or in the dashboard before it takes effect.

Contact us

For any question about this policy, to make a request about your information, or to raise a complaint, write to us at [email protected] or by post at:

Zappush LLP Desk No. WSA43, First Floor, B128, B Block, Sector 2, Noida Uttar Pradesh 201301, India Email: [email protected]