Security and your data

When you add Zyro on Shopify, it asks for 3 permissions. They let it read orders and see what shoppers do on your store. The third lets it add its tracking code.

Zyro asks for more inside the app, only when you use a feature that needs it.

Zyro does not ask Shopify for shoppers' names, emails or addresses on orders.

Card details never reach Zyro. Stripe or Shopify handles payment.

What Zyro can change

Zyro only changes a product when you keep a winning test or save a customs code. You can undo both.

Zyro checks a shopper's consent before it sends their events to ad tools.

You can erase one shopper's data from their page in Zyro. Shopify's privacy requests are handled for you. That covers requests to see or erase a shopper's data, and to erase a store's data.

We remove the full IP address after 90 days; the country stays.

We don't sell personal information.

You can download your data as a spreadsheet from most reports. You can delete a store. You can delete your login, with 14 days to change your mind.

On Shopify, uninstalling Zyro ends your subscription.

No system is perfectly safe. If a breach could cause serious harm, we tell the people it affects. We also tell the privacy regulator and the stores it affects. We do this without delay.

To report a security problem, email hello@zyro.world. Our security.txt file lists the same contact.

These pages set out the full rules.