Var80 Quiz Builder Privacy Policy

Effective date: November 6, 2026
Last updated: November 6, 2026

This Privacy Policy explains how [LEGAL COMPANY NAME], operating as VAR80 (“VAR80,” “we,” “us,” or “our”), collects, uses, stores, and shares information when Shopify merchants install or use Var80 Quiz Builder (the “App”).

It also explains how we process information submitted by visitors and customers through quizzes created using the App.

1. Scope

This Privacy Policy applies to:

Shopify merchants who install or use Var80 Quiz Builder.
Authorized merchant staff members.
Customers and visitors who interact with quizzes created through the App.
Information received from Shopify, merchants, and App users.

The Shopify merchant controls how quizzes are configured and what customer information is requested. For customer information processed on behalf of a merchant, the merchant generally acts as the data controller or business, and VAR80 acts as the processor or service provider.

2. Information we collect

Information received from Shopify

When a merchant installs or uses the App, we may receive:

Shopify store ID.
Store name and myshopify.com domain.
Merchant or store contact email.
Store owner or authorized staff information made available by Shopify.
Store currency, locale, timezone, and related store settings.
App installation and uninstallation status.
App subscription plan, billing status, and Shopify subscription identifiers.
Information permitted by the Shopify API access scopes approved during installation.

We only request Shopify API permissions reasonably required to provide the App.

Authentication and account information

We may process:

App account and organization identifiers.
Encrypted or protected Shopify authentication credentials.
Var80 Quiz Builder authentication credentials and tokens.
Installation, login, session, and authentication timestamps.

Passwords are stored using appropriate security protections and are not intended to be stored in readable form.

Quiz and submission information

Depending on how a merchant configures the App, we may process:

Quiz names, questions, answers, logic, and configurations.
Product mappings and product recommendation rules.
Quiz responses and recommendation results.
Submission dates and timestamps.
Customer names, email addresses, or phone numbers when requested by the merchant.
Other information a customer voluntarily enters into a quiz.

Merchants should not configure quizzes to collect sensitive personal information unless they have a lawful reason and appropriate safeguards.

Technical information

We may automatically collect:

IP address.
Browser and device information.
Operating system.
Date and time of access.
Referring pages.
App activity and diagnostic information.
Error, security, and audit logs.

Payment information

Paid App subscriptions are processed through Shopify’s Billing API.

VAR80 may receive subscription status, plan name, price, currency, billing interval, and Shopify subscription identifiers. VAR80 does not directly receive or store complete merchant payment-card information through App billing.

3. How we use information

We may use information to:

Install, authenticate, and operate the App.
Create and maintain a separate App organization for each Shopify store.
Provide quiz-building and product-recommendation functionality.
Process and display quiz submissions.
Manage free and paid subscription plans.
Verify subscription status with Shopify.
Provide technical support.
Communicate important service and account information.
Diagnose errors and improve reliability.
Prevent fraud, abuse, and unauthorized access.
Enforce our terms and protect our legal rights.
Comply with Shopify requirements and applicable laws.
Process privacy, access, correction, and deletion requests.

We do not use one store’s information to provide another store with access to that information.

4. Merchant responsibilities

Merchants are responsible for:

Determining what information their quizzes collect.
Providing required privacy notices to customers.
Obtaining consent where required by law.
Ensuring that their quiz content and data collection are lawful.
Responding to customer privacy requests with VAR80’s assistance where applicable.
Avoiding the collection of unnecessary sensitive information.

5. Legal grounds for processing

Where applicable law requires a legal basis, we process information based on one or more of the following:

Performance of our contract with the merchant.
The merchant’s instructions.
Consent provided by the individual.
Compliance with legal obligations.
Our legitimate interests in operating, securing, supporting, and improving the App.

Individuals may withdraw consent where processing relies on consent, subject to legal and contractual limitations.

6. How we share information

We may share information with:

Shopify, as necessary to operate the integration and process billing.
Hosting, infrastructure, database, security, monitoring, email, and customer-support providers.
Professional advisers, auditors, insurers, and legal representatives.
Government authorities when disclosure is legally required.
A successor organization in connection with a merger, acquisition, financing, restructuring, or sale of assets.

Service providers may process information only as required to provide services to VAR80 and subject to appropriate contractual obligations.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless expressly disclosed and legally permitted.

7. Data retention

We retain personal information only for as long as reasonably necessary to:

Provide and secure the App.
Maintain the merchant’s account.
Fulfil the purposes described in this policy.
Meet legal, accounting, tax, and reporting obligations.
Resolve disputes and enforce agreements.

Our intended retention practices are:

Shopify access and refresh tokens are removed or invalidated when an uninstall webhook is processed.
Quiz submissions remain available while the merchant’s account is active, unless deleted earlier.
Operational and security logs are generally retained for [LOG RETENTION PERIOD].
Data subject to a verified deletion or Shopify redaction request is deleted or anonymized within [DELETION PERIOD, SUCH AS 30 DAYS], unless continued retention is legally required.
Billing and legally required transaction records may be retained for [LEGAL RETENTION PERIOD].

Backups may retain deleted information temporarily until the applicable backup rotation period expires. Such information remains protected and is not restored except for disaster recovery or legal requirements.

8. App uninstallation

When a merchant uninstalls Var80 Quiz Builder:

The store is marked as uninstalled.
Access to the App is disabled.
Shopify authentication credentials are removed or invalidated.
Active App sessions are revoked where technically possible.
Shopify is notified or queried as necessary to reconcile subscription status.
The connected Quiz account is marked as no longer installed.

Uninstallation does not necessarily cause immediate deletion of all information. Shopify may subsequently send a mandatory store-redaction request. Upon receiving and validating that request, we delete or anonymize the applicable store data according to our retention obligations.

If the merchant reinstalls the App before deletion is completed, the existing store account may be securely reactivated after a new Shopify OAuth authorization.

9. Shopify privacy requests

Var80 Quiz Builder processes Shopify’s mandatory privacy webhooks:

Customer data request

When Shopify sends a valid customers/data_request, we search for information associated with the identified store and customer. We provide the relevant information to the merchant or report that no matching data was found.

Customer deletion request

When Shopify sends a valid customers/redact request, we delete or anonymize personal information associated with the identified customer unless retention is legally required.

Store deletion request

When Shopify sends a valid shop/redact request, we delete or anonymize information associated with that Shopify store, including the corresponding App organization and personal quiz-submission data, subject to legal retention requirements.

Privacy requests are isolated by Shopify store ID, store domain, and App organization identifier. A shared merchant email address does not cause information from another store to be accessed or deleted.

10. Individual privacy rights

Depending on location, individuals may have the right to:

Request access to personal information.
Request correction of inaccurate information.
Request deletion of personal information.
Restrict or object to processing.
Request a portable copy of information.
Withdraw consent.
Appeal a decision regarding a privacy request.
Submit a complaint to a data-protection authority.

Customers who submitted information through a merchant’s quiz should normally contact that merchant first. VAR80 will assist the merchant with verified requests where required.

Requests can also be sent to:

Email: cd@var80.com
Subject: Var80 Quiz Builder Privacy Request

We may request information necessary to verify the requester’s identity and connection to the relevant Shopify store or quiz submission.

11. International data transfers

Information may be processed in countries other than the country in which the merchant or customer is located.

Where required, we use recognized safeguards for international transfers, such as adequacy decisions, contractual protections, or Standard Contractual Clauses.

App data is primarily hosted or processed in [HOSTING COUNTRY OR REGION].

12. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including:

HTTPS encryption in transit.
Access controls.
Protected authentication credentials.
Webhook signature verification.
Restricted administrative access.
Logging and monitoring.
Data minimization.
Secure software-development practices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Cookies and tracking

The App may use cookies or similar technologies that are necessary for authentication, security, session management, preferences, and App operation.

If optional analytics, marketing, or behavioral tracking technologies are used, they will be disclosed and consent will be obtained where required.

The App does not rely on third-party cookies to authenticate Shopify merchants inside the Shopify admin.

14. Children’s information

Var80 Quiz Builder is intended for use by businesses and is not directed to children.

Merchants must not intentionally use the App to collect children’s personal information without complying with applicable laws and obtaining any required parental consent.

If we learn that children’s personal information was collected unlawfully, we will take appropriate steps to delete it.

15. Third-party services

The App integrates with Shopify and may contain links to merchant stores, products, or third-party services.

Third-party services operate under their own privacy policies. This policy does not govern information processed independently by Shopify or another third party.

Shopify’s privacy policy is available at:

https://www.shopify.com/legal/privacy

16. Changes to this policy

We may update this Privacy Policy to reflect changes to the App, our data practices, applicable laws, or Shopify requirements.

We will publish the updated policy on this page and update the “Last updated” date. Where required, we will provide additional notice.

17. Contact us

For privacy questions or requests, contact:

Legal company name: Nutsovertech
Trading name: VAR80
Application: Var80 Quiz Builder
Email: cd@var80.com
Postal address: [COMPLETE BUSINESS POSTAL ADDRESS]
Country: India