Privacy Policy: Foxy: Product Quiz Builder

Effective date: 2 November 2026

This policy explains how Foxy: Product Quiz Builder ("Foxy", "we", "us") collects, uses and shares personal information. Foxy is a Shopify app that lets merchants build product-recommendation quizzes and show them on their online stores. Foxy is provided by Foxelli Group, 2e van Leyden Gaelstraat 1G, 3134 LH Vlaardingen, the Netherlands.

This policy covers two groups of people:

• Merchants: businesses that install Foxy on their Shopify store, and their staff.
• Shoppers: people who take a Foxy quiz on a merchant's store.

It does not cover the merchant's own store, Shopify, or the services a merchant connects to Foxy (for example Klaviyo or Meta). Each of those has its own privacy policy.

1. Our role

• Merchant information. For information about merchants and their use of Foxy, we are the controller. We decide how that information is used to provide, secure and support the app.
• Shopper information. For information about shoppers, the merchant is the controller (the "business" under US state privacy laws). We process shopper information on the merchant's behalf, as a processor or service provider, only to run the merchant's quizzes and the features the merchant turns on. If you are a shopper and want to use your privacy rights, contact the store where you took the quiz. Section 12 explains how this works.

2. Information we collect about merchants

From Shopify, when you install and use Foxy

• Store details: your store's myshopify.com domain, Shopify store ID, store name and description, primary storefront domain, the languages your store uses, and the access tokens Shopify issues to the app.
• Catalog information: your products and collections (titles, descriptions, images, prices, product types, vendors, tags, availability, inventory totals and best-selling order). We keep an index of it so you can choose products in the editor and so quizzes can recommend them.
• Your Foxy plan and trial status, as reported by Shopify. Shopify handles all app payments; we never receive card or bank details.
• If you choose to use unique discount codes, the code discounts in your store (title, status and usage limits) and the codes Foxy adds to the discount you pick.

From you

• The quizzes you build: questions, answers, results, designs, settings and translations.
• Images you upload or pick from the built-in free photo library. These are stored in your store's Shopify Files.
• Details for services you connect: API keys, access tokens, list and audience IDs, pixel and measurement IDs, and webhook addresses.
• Messages you write to the AI quiz assistant and the assistant's replies.
• What you send us when you contact support by email or through the chat on Foxy's Support page, such as your name, email address and messages. When you use the chat, it also receives your store's myshopify.com domain, the Foxy admin page you chat from, and the technical information any website receives, such as your IP address and browser type.

Automatically

• How much of the AI features your store has used each month (number of requests, amount of text processed and estimated cost, not the content).
• Server logs with technical information about each request to our servers, such as the time, the address requested and the response status.

We do not use advertising or analytics trackers in the Foxy admin.

3. Information we process about shoppers

Foxy collects only what a merchant's quiz is set up to ask, plus the technical information described below. Merchants decide which questions and form fields their quizzes contain.

Quiz answers and form entries. The answers a shopper selects or types, including any extra details they write, and the entries in form fields the merchant adds. Depending on the quiz, these can include an email address, first and last name, phone number, birthday, other dates, numbers and free text. We also store the result the shopper received, when they started and finished, and a random identifier for the quiz session. When a shopper submits an email page, we store that submission even if they do not finish the quiz.

Quiz activity. Which pages of the quiz were viewed, when the quiz was started and completed, whether an email was submitted, which result and buttons were clicked, and which products were added to the cart from a result. This activity is linked to the random session identifier, not to a name or email address, and is used to show the merchant statistics about the quiz.

Link to the shopper's Shopify customer record.

• If a shopper is signed in to the store's customer account, Shopify tells Foxy their customer ID. We store a one-way hashed (pseudonymised) form of it with the quiz response, so that the response can be linked to the customer and deleted on request.
• If a shopper enters an email address, Foxy checks whether the store already has a Shopify customer with exactly that email address. If it does, Foxy saves the shopper's quiz answers, form entries and result to that customer's record in the merchant's Shopify admin (as customer metafields), and may start the merchant's Shopify Flow workflows for that customer. Foxy never creates new Shopify customers.
• When a merchant opens a quiz response in Foxy, Foxy reads the matched customer's email address and the quiz fields Foxy saved from Shopify, to show them next to the response. We do not store them. Foxy does not read customers' names, phone numbers or addresses from Shopify.

Orders. When an order is paid, Shopify sends it to Foxy. If the order came from a quiz, we keep a hashed reference to the order, the quiz session identifier, the order total and currency, when it was paid, and whether it was a test order. Foxy recognises these orders by two attributes it adds to the shopper's Shopify cart (see section 4). We do not keep the buyer's name, address, email address or the items ordered.

Unique discount codes. If a merchant gives each shopper their own discount code, we record which code was given to which quiz session.

Technical information.

• IP address. Used briefly, in memory, to limit abuse of the discount code service; it is not stored for that purpose. If the merchant has connected Meta's Conversions API, we keep the IP address with the pending Meta event and send it to Meta (section 8).
• Browser type (user agent). Used to filter out automated traffic, and sent to Meta with Conversions API events when the merchant has connected it.
• Advertising and analytics identifiers. If they are present in the shopper's browser, the quiz reads the identifiers set by Meta and Google Analytics tags on the store (the _fbp, _fbc, _ga and _ga_* cookies, and the click ID in a Facebook ad link). We keep them only when the merchant has turned on and connected Meta or Google Analytics for the quiz, and use them only to send that merchant's events.
• Privacy choices. Whether the shopper has allowed analytics and marketing, as reported by Shopify's Customer Privacy API.
• Page. The path of the store page where the quiz was taken (without query parameters).

Shoppers' browsers reach Foxy through the merchant's store, using Shopify's app proxy. Shopify forwards these requests to our servers.

4. Cookies and browser storage on merchants' stores

Foxy does not set its own cookies. The quiz uses the browser's local storage and session storage:

When a shopper adds products to the cart from a quiz result, or follows a result to a product, the cart or checkout, Foxy adds two attributes to their Shopify cart (_qb_session and _qb_quiz: the quiz session identifier and the quiz's handle). They become part of the order's details in Shopify and let Foxy attribute the order to the quiz.

How the quiz handles consent. Foxy reads the shopper's choices from Shopify's Customer Privacy API, which reflects the store's cookie banner and privacy settings:

• Meta Pixel and Conversions API events are not sent when the shopper has declined marketing or opted out of the sale or sharing of their personal information.
• Google Analytics events are not sent when the shopper has declined analytics.
• An email address or phone number the shopper enters is passed to Shopify's visitor API (which lets the merchant's Shopify marketing tools recognise the shopper) only when the shopper has allowed both analytics and marketing.
• Saving quiz progress and Foxy's own quiz statistics are part of the quiz itself and do not depend on the cookie banner choice. They use no cookies and no identifiers shared with other sites.

Merchants are responsible for their store's cookie banner, their own privacy notice to shoppers and the consent wording on their quizzes' email pages.

5. How we use information

Merchant information is used to:

• provide and operate Foxy: build, preview, publish and translate quizzes, show statistics and responses, and run the integrations you connect;
• provide the AI features you choose to use (section 6);
• check your plan and apply its limits;
• keep the service secure, prevent abuse and fix problems;
• answer support requests and tell you about important changes to the service;
• comply with legal obligations.

If you are in the European Economic Area, the United Kingdom or Switzerland, our legal bases are: performing our contract with you (providing the app); our legitimate interests in securing, maintaining and improving the service; compliance with legal obligations; and your consent where the law requires it.

Shopper information is used only to provide the quiz service to the merchant: to show the quiz and save progress, recommend products, record responses for the merchant, show quiz statistics, attribute orders to quizzes, give out discount codes, deliver data to the services the merchant has connected, and handle privacy requests that Shopify forwards.

We do not sell personal information. We do not use shopper information for our own marketing, we do not combine information from different merchants' stores, and we do not use merchant or shopper information to train AI models.

Quiz results and product recommendations are produced automatically from the rules and answers the merchant sets up. They do not have legal or similarly significant effects on shoppers.

6. AI features

Foxy offers two optional AI features to merchants: an assistant that builds and edits quizzes from the merchant's requests, and automatic translation of quiz text.

• What we send to the AI provider: the merchant's messages to the assistant and the recent conversation; the quiz content (without connection settings or credentials) and its name; and information from the store's catalog index: the store's name and description, and product and collection names, descriptions, types, vendors, tags, prices and best-selling order. For translation, we send the quiz text to translate and the merchant's translation preferences.
• What we do not send: shopper answers, email addresses, form entries, customer records, orders or credentials.
• Providers: OpenAI is our current AI provider. Anthropic is an alternative provider we may use for the same features. Both process the data in the United States.
• We use these providers' business APIs, under which they do not use the content we send to train their models. They may keep it for a limited period to monitor for abuse, under their own terms.
• The merchant reviews the assistant's changes before saving them. We keep the assistant conversation with the quiz so the merchant can continue it.

7. Service providers we use (sub-processors)

Foxy runs on Shopify. Information that Foxy writes to a merchant's store (customer metafields, quiz settings, images, cart attributes, Shopify Flow triggers) is held by Shopify under the merchant's Shopify account and Shopify's privacy policy.

We will update this list before a new sub-processor starts processing personal information.

8. Services a merchant connects or chooses

Foxy sends shopper information to the following services only when the merchant connects them or turns them on for a quiz. Each one works under the merchant's own account with that service and its own privacy policy.

• Klaviyo. When an email page is linked to a Klaviyo list, the email address, the name, phone number and birthday from the email page, the quiz answers and form entries, the result and the quiz page are added to the merchant's Klaviyo account, and the email address is subscribed to the chosen list. Depending on the merchant's setup, either the shopper's browser sends this directly to Klaviyo, or our servers do.
• Mailchimp. The email address, the name, phone number and birthday from the email page, the result, and tags for the quiz, the result and the answers chosen are added to the merchant's chosen audience. The address is subscribed, or marked pending until the shopper confirms if the audience uses double opt-in.
• Meta (Pixel and Conversions API). In the shopper's browser, quiz events (quiz started, question answered with the chosen answer options, lead, quiz completed, added to cart) are passed to the merchant's Meta Pixel if it is already on the store. From our servers, lead and quiz-completed events are sent to the merchant's Meta pixel with the email address hashed (SHA-256), the IP address, browser type, Meta cookie identifiers, the page address, and the quiz and result names.
• Google Analytics 4. In the shopper's browser, quiz events (with the chosen answer options for questions) are passed to the merchant's Google tag if it is already on the store. From our servers, lead and quiz-completed events are sent to the merchant's Google Analytics property with the Google Analytics client and session identifiers and the quiz and result names. Foxy does not send the email address or IP address to Google.
• Webhooks (for example Zapier, Make or the merchant's own system). Completed responses, including answers, form entries and the email address, are sent to the HTTPS address the merchant enters.
• Shopify customer records and Shopify Flow. See section 3. Flow triggers carry a reference to the existing Shopify customer, the quiz, the result and the completion time.
• The merchant's store page. The quiz announces its events on the store page (for example when an email is submitted or a result is shown, including the answers) and through Shopify's customer events, so the merchant's own scripts and pixels can respond to them. The merchant controls those scripts and pixels.
• Content the merchant adds to a quiz. If the merchant chooses a Google Font, the shopper's browser loads it from Google's servers, which receive the shopper's IP address. If the merchant adds a YouTube or Vimeo video, it loads from that service, which may set its own cookies.

We may also disclose information when required by law or legal process, to protect the rights, property or safety of our users, the public or us, or as part of a merger, acquisition or sale of assets, in which case the information stays subject to this policy.

9. International transfers

Foxy's servers and database are in Frankfurt, Germany. Foxelli Group is based in the Netherlands, and our team may access information from there to operate and support the service. Some of our providers and the services merchants connect process information in the United States and other countries.

When personal information from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or, for certified providers, the EU–US Data Privacy Framework.

10. How long we keep information

Information that Foxy saved in a merchant's Shopify store (such as customer metafields, images and order attributes) stays in the store after uninstalling, under the merchant's control. Information sent to services the merchant connected is kept according to those services' terms.

11. Security

• All connections between browsers, Shopify, our servers and our providers use HTTPS (TLS).
• Our database runs in our hosting provider's private network and cannot be reached from the public internet. Our hosting provider, which holds SOC 2 Type 2 and ISO 27001 certifications, encrypts the database storage at rest.
• API keys, access tokens and webhook addresses for connected services, and the customer identifiers in privacy requests, are additionally encrypted in our database with AES-256-GCM.
• We verify that requests come from Shopify: webhooks by their HMAC signature, storefront requests by the app proxy signature, and admin requests by Shopify session tokens.
• Each store's data is kept separate in every database query.
• Public endpoints have request size limits, rate limits and filters for automated traffic.
• Shopify customer and order IDs are stored as one-way hashes. A raw customer ID is kept only while an update to that customer's Shopify record is waiting to be delivered.
• We design our logs to leave out email addresses and quiz answers.
• Access to production systems is limited to staff who need it, and staff accounts are protected with strong passwords and two-factor authentication.

No system is completely secure. If a security incident affects personal information we hold for a merchant, we will tell the affected merchants without undue delay and give them the information they need to meet their own obligations.

12. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to restrict or object to its use, and to withdraw consent. You also have the right to complain to your data protection authority.

Merchants can see and export their quiz responses at any time (CSV export in Foxy), delete quizzes and their responses, disconnect integrations, and uninstall Foxy, which deletes their data as described in section 10. For other requests, contact us at info@foxyquizapp.com.

Shoppers should contact the store where they took the quiz. Shopify passes privacy requests from a store's customers to Foxy:

• Access requests: Foxy lists the request in the merchant's Foxy admin (Support, Privacy requests) and prepares a report of the information Foxy holds about the customer, which the merchant delivers to the customer. Foxy shows each request with a 30-day due date.
• Deletion requests: Foxy deletes the customer's quiz responses, quiz activity, order attributions and per-session summaries when Shopify sends the request. Any code given to them stays issued but is no longer linked to their quiz session.

If a shopper contacts us directly, we will refer them to the merchant and help the merchant respond.

US state privacy laws. As a service provider, we process shopper information only for the merchant's business purposes described in this policy. We do not sell personal information or share it for cross-context behavioural advertising on our own behalf. Information sent to Meta or Google is sent only when the merchant has turned on those integrations, and Foxy follows the shopper's choices as reported by Shopify (section 4).

13. Merchants' responsibilities

Merchants decide what their quizzes ask and which services they connect. Merchants are responsible for telling shoppers how their information is used, for having a lawful basis for collecting it, and for obtaining any consent the law requires, including consent to email marketing on email pages and the store's cookie banner. Merchants should not use Foxy quizzes to collect payment card numbers, passwords, government ID numbers or health information unless they have a lawful basis and give shoppers the required notices.

14. Children

Foxy is a service for businesses and is not directed to children. We do not knowingly collect personal information from children under 16. Merchants whose stores are directed to children are responsible for complying with the laws that protect children's privacy.

15. Changes to this policy

We will post any changes on this page and update the effective date. If a change materially affects how we handle personal information, we will tell merchants by email or in the app before it takes effect.

16. Contact us

Foxelli Group
2e van Leyden Gaelstraat 1G, 3134 LH Vlaardingen, the Netherlands
Email: info@foxyquizapp.com