This Privacy Policy explains how Importify Ltd (“Popify”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you visit popify.app, use the Popify dashboard at app.popify.app, install the Popify app or plugin, or use our support and related services (together, the “Service”).
1. Who we are
Importify Ltd operates the Service. Contact details are listed at the end of this policy.
2. Information we collect
We collect the following categories of information, depending on how you use the Service:
- Account information: name, email address, login details, store address, connected platform, and subscription status.
- Store and platform data: information needed to connect with your ecommerce platform, such as your product list, your orders, and the access your platform grants to the app.
- Popup content and settings: the popups, notifications, images, and settings you create or manage through the Service.
- Billing and subscription data: plan, billing channel, payment status, and cancellation status. Payment card details are handled by the payment provider or your ecommerce platform and are not stored by Popify.
- Support and communications: emails, contact form submissions, and related correspondence.
- Website and usage data: server logs, which include IP address, browser type, pages requested, and the time of the request.
3. How we collect information
We collect information directly from you, from your connected ecommerce platform, from your use of the Service, from support communications, and from payment and app marketplace providers.
4. Cookies and similar technologies
The public website at popify.app does not set cookies and does not use analytics or advertising cookies.
The dashboard at app.popify.app uses necessary cookies to keep you signed in and to protect your account. It loads fonts, icons, and script libraries from content delivery networks, and some pages embed tutorial videos from YouTube.
More detail is available in our Cookie Policy.
5. How we use information
We use information to:
- provide, operate, secure, and maintain the Service;
- connect your store and show your popups on it;
- process subscriptions, billing, and cancellations;
- provide customer support and troubleshoot issues;
- send account notices, service emails, and support responses;
- detect abuse, fraud, and security incidents;
- comply with legal, tax, accounting, and platform obligations.
6. Legal bases for EEA and UK users
Where GDPR or UK GDPR applies, we rely on the following legal bases:
- Contract: to provide the Service, manage accounts, and process subscriptions.
- Legitimate interests: to secure the Service, prevent abuse, respond to support requests, send service emails, and operate our business.
- Legal obligation: to comply with tax, accounting, dispute, regulatory, and law-enforcement requirements.
7. How we share information
We share information with the service providers that help us operate the Service: hosting providers (Cloudways and DigitalOcean), a network security and delivery provider (Cloudflare), email providers (Postmark and Mailchimp), our mailbox providers, the providers that handle billing (Shopify, Wix, and PayPro Global), the tool that runs our affiliate programme (Appsify), and OpenAI for AI popup suggestions, which receives your popup settings and text from your store’s public homepage. Your ecommerce platform receives the popups and settings you publish through the Service.
We may also share information when required by law, to protect rights and safety, to enforce our terms, in connection with a business transaction, or with your direction or consent.
We do not sell personal information.
8. Third-party platforms
If you connect Popify to Shopify, Wix, or WooCommerce, or to an email marketing platform, a reviews app, or an image hosting account, those services process information under their own terms and privacy policies. Popify does not control those third-party privacy practices.
Data processed on behalf of merchants
When a merchant uses Popify on its store, Popify processes personal data of that store’s visitors and customers on the merchant’s behalf. For this data the merchant is the controller and Popify acts as a processor.
The data is: a visitor identifier kept in cookies and browser storage, the pages on which popups are shown, IP address and browser type; order data received from the store platform, which can include the customer’s name, contact details and address, the products ordered and the amounts; add to cart events; the name, email address and phone number a visitor enters in a popup form; web push subscription details and cart contents where the merchant uses push notifications; and reviews received from the merchant’s reviews app. It is used only to show popups and notifications on the merchant’s store, to pass form submissions to the merchant, and to report results to the merchant.
This data is hosted in the United States. Popify uses the following subprocessors for it: Cloudways Ltd (managed hosting, Malta), DigitalOcean LLC (cloud servers, United States), Cloudflare, Inc. (network security and delivery, United States), and AC PM LLC, known as Postmark (emails that tell the merchant about a new form submission, United States).
The Popify script on a merchant’s store sets cookies and uses browser storage, as described in our Cookie Policy. It loads fonts from Google Fonts and script libraries from content delivery networks in the visitor’s browser.
Visitors and customers who wish to exercise their rights over this data should contact the store concerned. Popify’s Data Processing Agreement for merchants is available at popify.app/dpa.
9. International transfers
We process and store information in countries other than your country of residence, including countries where Popify and its service providers operate. The Popify dashboard and its database are hosted in the United States. Where required, we use appropriate safeguards for international transfers.
10. Retention
We keep information for as long as needed to provide the Service, maintain records, resolve disputes, enforce agreements, and comply with legal obligations. You can ask us to delete your account data by contacting support@popify.app.
11. Security
We use technical and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, request portability, or lodge a complaint with a data protection authority.
You may submit requests by contacting support@popify.app. We may need to verify your identity before completing a request.
13. Children
The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new update date.
15. Contact
Importify Ltd
Hagana 40/34, Givatayim, Israel 5348813
Email: support@popify.app
Website: https://popify.app/