Privacy policy

Last updated: October 25, 2026

This policy explains what the Post Purchase Surveys app (“the app”) stores, why, and for how long. Furvur Inc. (“we”) makes the app. The app is used by Shopify merchants (“merchants”) to survey the people who buy from them (“buyers”).

What we store about buyers

• The Shopify order ID that an answer belongs to.
• The buyer’s answers. Before we save a written answer, we automatically replace email addresses and phone numbers in it with [email] and [phone]. We also replace a name with [name] when it starts with a capital letter and follows a phrase such as “my name is”, “I’m” or “I am”, or when it ends the answer after a sign-off such as “Thanks,” or “Cheers,”. Other names can stay in the answer, so the survey asks buyers not to type personal details.
• The order total, so that merchants can see revenue and average order value for each answer.
• The date and time of each answer.
• Whether the answer came in after the store reached its plan’s monthly answer limit. Such an answer is stored but hidden from the merchant, and it is not added to the order. If the store upgrades, the hidden answers from the current calendar month are shown, oldest first, up to the new plan’s limit. Hidden answers from earlier months stay hidden. Hidden answers follow the same retention period as all other answers.

The app does not ask for or receive buyers’ names, email addresses, phone numbers, postal addresses or the products in an order, and we do not save IP addresses with answers. The app does not ask Shopify for access to customer records. The only personal details we can hold are ones a buyer types into a written answer and our scrubbing misses.

Our hosting provider, Cloudflare, keeps short technical logs of requests to the app and of the app’s error messages. These logs can include IP addresses and store domains, and are deleted after at most 7 days.

Answers are not anonymous. Each answer links to an order, and the merchant can see who placed that order in their Shopify admin.

What we store about merchants

• The store’s Shopify domain and currency.
• Shopify access tokens, encrypted, so the app can read order totals and add tags and answers to orders.
• The merchant’s survey questions and settings.
• The store’s app plan and subscription status, as Shopify reports them.
• The number of answers each month, to apply the plan’s limits.
• A log of exports: the time and the type of each export. We keep each entry for 365 days.
• The texts that the merchant writes for the survey on the checkout pages.
• Problems with adding tags or answers to orders: the time, and Shopify’s reason with any IDs removed. These records hold no order ID, and we delete each one after 90 days.
• For stores that used the earlier version of the app: daily answer counts from that version, with no text and no revenue.

How long we keep it

Each merchant chooses a retention period of 7, 30, 60 or 90 days. New stores start at 30 days. Every night, the app adds answers up into daily totals: for each day and answer, the number of answers and the sum of their order totals. In the first nightly run after the retention period ends, the individual answers are deleted, including the text of written answers. So an answer can stay up to about one day longer than the retention period.

The daily totals stay, so that charts keep their history. They contain no order ID and no text.

To stop one order from answering twice, we keep the Shopify order ID of each answered order. We delete it when a buyer’s deletion request covers that order, or when we delete the store’s data.

What we do with it

• Show merchants totals and charts for their own store.
• Let merchants download CSV exports: the individual answers that the app still keeps (with the order ID, a link to the order in Shopify, the question, the answer, the scrubbed written answer, the order total and the currency), and the daily totals. Exports never contain buyers’ names, email addresses, phone numbers or postal addresses, and they never contain answers that are hidden because of a plan limit.
• Add tags, when the merchant sets them up, and the buyer’s choice, rating and NPS answers to the order in Shopify. For an “Other” answer, only the word “Other” is added. Written answers are never added to the order.

In the app’s reports, an answer given by fewer than 3 buyers is never shown on its own. This rule does not apply to exports: the answers export lists each answer with its order ID. Each answer is also attached to its own order in the merchant’s Shopify admin, through tags and the order’s app data. We do not sell data, and we do not use it for advertising.

Where it is processed

The app runs on Cloudflare. Answers and settings are stored in Cloudflare. An export file is stored in Cloudflare, can be downloaded through a private link for 15 minutes, and is deleted within about an hour after that. Shopify provides the order data. When you write to support@postpurchase.net, your message is kept in our mailbox at Fastmail. The app does not use AI models today. We will update this policy before we add any AI feature.

Who is responsible

For buyers’ answers, the merchant decides what the survey asks and how long answers are kept. The merchant is the controller of that data, and we process it on the merchant’s behalf. For merchants’ own account data, we are the controller.

Deletion requests

We handle Shopify’s privacy requests. When a buyer asks a merchant to delete their data, Shopify tells us which orders are affected, and we delete the answers and order IDs for those orders. Daily totals that were already made stay: they hold only counts and sums for each day and answer, with no order ID. Tags and answers that were already added to an order belong to the merchant’s order in Shopify, and the app does not remove them.

When a merchant uninstalls the app, Shopify asks us to delete the store’s data about 48 hours later, and we delete all of it, including the plan and subscription records.

When a buyer asks for a copy of their data, we have no names or contact details to send. Answers are linked only to an order ID, and the merchant can see them on the order in Shopify.

Buyers who want their answers deleted can ask the store they bought from, or write to us at the address below.

Contact

Write to support@postpurchase.net.