Privacy Policy

Effective date: July 17, 2026

This policy explains what data PulseAsk processes, why we process it, where it lives, how long we keep it, and what rights you and your customers have. We have tried to keep it short and readable. If anything is unclear, email us and we will answer plainly.

1. Who we are

PulseAsk is a post-purchase survey app for Shopify, built by Leria, an independent Shopify app studio. For anything related to this policy or your data, contact us at anadvisory.fr@gmail.com. We are the data processor for the data described below; you, the merchant, remain the data controller for your customers' data.

2. Data we process, and why

PulseAsk exists to do one thing: link survey answers to real revenue so you can see which marketing channels actually drive your sales. To do that, the app processes:

• Survey responses — the channel a customer selects (e.g. TikTok, Podcast, Friend/Family) and any free-text answer they type.
• Order data — the order id, order total, and order date, so each response can be tied to the revenue it represents.
• Customer id — the Shopify customer id attached to the order, used to compute simple lifetime value per responding customer.
• Shop domain and app settings — your store's myshopify domain and your survey configuration (questions, options, language), so the app works for your store.

The app also writes a metafield on the order to tag it with the reported channel, which keeps the attribution visible inside your own Shopify admin.

3. What we do not collect

• No payment details. We never see card numbers or any payment information; billing is handled entirely by Shopify.
• No browsing behavior. The survey widget does not track customers across pages or sites, does not set advertising cookies, and does not fingerprint devices.
• No ad tracking. We do not send data to advertising networks.
• No sale of data. We do not sell, rent, or share your data or your customers' data with third parties for their own purposes. Ever.

4. Legal basis

We process order and customer data on the basis of the contract between you and us: you install PulseAsk to attribute revenue to marketing channels, and the data described above is the minimum needed to deliver that service (legitimate interest and performance of contract under GDPR). Survey answers are provided voluntarily by customers — the survey is optional and dismissible, and skipping it has no effect on their order.

5. Where your data is stored

Data is stored in a managed PostgreSQL database hosted with a reputable cloud provider in the EU/US. Access is limited to what is needed to operate and support the app. Data is encrypted in transit.

6. Retention and deletion

• Uninstall: when you uninstall PulseAsk, Shopify sends us a shop/redact webhook and we delete your store's data — survey responses, settings, and associated order data.
• Customer requests: we implement Shopify's mandatory GDPR webhooks. On customers/data_request we export the data we hold for that customer so you can pass it on; on customers/redact we delete that customer's survey responses and associated records.
• You can also email us at any time to request deletion of specific data, and we will action it.

7. Your obligations as a merchant

Because you are the data controller for your customers, you should mention in your own store's privacy policy that you use a post-purchase survey to understand how customers found you, and that responses are linked to orders for attribution purposes. A single sentence is usually enough.

8. Subprocessors

We use a managed cloud hosting provider to run the app and its PostgreSQL database. That provider processes data only on our instructions, as infrastructure. We do not use analytics, advertising, or data-enrichment subprocessors. If our subprocessors change, we will update this page.

9. Your rights

Depending on where you or your customers are located, applicable law (including GDPR) grants rights of access, correction, deletion, portability, and objection. Merchants can exercise these rights — for themselves or on behalf of their customers — by emailing anadvisory.fr@gmail.com. We respond to every request.

10. Changes to this policy

If we materially change how we handle data, we will update this page and change the effective date at the top.