Privacy Policy
Last updated: July 2026
This Privacy Policy describes how ReplayPRO ("we", "us", or "our") collects, uses, and shares information when you use our Shopify application.
Information We Collect
Store Information
When you install ReplayPRO, we collect:
- Store details — Your Shopify store name, domain, and myshopify domain
- Contact information — Store owner email address
- Store settings — Timezone, currency, and locale preferences
Visitor Data
ReplayPRO collects information about visitors to your store:
- Session data — Pages viewed, time spent, navigation paths
- Device information — Browser type, operating system, screen resolution
- Location data — Country and city (derived from IP address)
- Interaction data — Clicks, scrolling, form interactions (content can be masked)
- Cart and order data — Products added to cart, purchases made (if enabled)
Order and Customer Data (via Shopify Admin API)
To provide revenue and conversion analytics, ReplayPRO processes order- and customer-related data from your Shopify store:
- Order data — Order totals, currency, financial and fulfillment status, refunds, order source, and timestamps
- Customer purchase summary — Number of orders and total amount spent per customer, and a customer identifier
We use this data to attribute sessions to purchases, measure conversion and drop-off in monetary terms, detect revenue anomalies (such as checkout drop-offs or refund spikes), and identify your highest-value customers so you can prioritize issues that affect them.
We access only the minimum data required for these features. We do NOT access customer names, email addresses, phone numbers, or postal addresses.
What We Do NOT Collect
- Payment information — Credit card numbers, payment details
- Checkout page recordings — We never visually record Shopify checkout pages. We do process checkout progression events (which step a visitor reached, and order totals) via Shopify Web Pixels to measure conversion, but no checkout page content is recorded
- Passwords — Password fields are automatically masked
- Sensitive personal data — We do not intentionally collect health, financial, or other sensitive data
How We Use Information
We use the collected information to:
- Provide the service — Record sessions, generate analytics, track visitors
- Revenue analytics — Measure conversion, attribute sessions to purchases, and detect revenue anomalies to alert you
- Improve the app — Analyze usage patterns to enhance features
- Provide support — Help troubleshoot issues and answer questions
- Send notifications — Visitor subscription alerts, limit warnings, important updates
- Billing — Process subscription payments through Shopify
Data Storage and Security
Storage
- Data is stored on secure servers
- Session recordings are stored temporarily based on your plan
- Visitor profiles and analytics data are retained while your account is active
Security Measures
- Encryption — Data is encrypted in transit (HTTPS/TLS)
- Access controls — Only authorized personnel can access data
- Secure infrastructure — We use industry-standard cloud providers
Data Sharing
We do NOT sell your data or your visitors' data to third parties.
We may share data with:
- Service providers — Infrastructure and hosting providers necessary to operate the service
- Legal requirements — When required by law, court order, or government request
- Business transfers — In connection with a merger, acquisition, or sale of assets
Your Rights and Controls
Privacy Controls in ReplayPRO
You have control over what data is collected:
- Input masking — Hide text entered in form fields
- Customer detail masking — Hide personal information on order pages
- Exclude visitors — Stop tracking specific visitors
- Block visitors — Prevent tracking by IP, country, city, or visitor ID
- Disable recording — Turn off session recording entirely
Data Access and Deletion
- Access your data — View all collected data in your ReplayPRO dashboard
- Delete visitor data — Remove specific visitors from your records
- Delete all data — Use the Reset Limit feature or uninstall the app
- Account deletion — Uninstalling ReplayPRO deletes all associated data
Your Visitors' Privacy
Informing Your Visitors
As a store owner, you are responsible for:
- Informing visitors about tracking on your store
- Updating your store's privacy policy to mention session recording
- Complying with applicable privacy laws (GDPR, CCPA, etc.)
Recommended Disclosure
We recommend adding the following to your store's privacy policy:
"We use session recording software to analyze how visitors interact with our website. This may include recording mouse movements, clicks, and page scrolling. Personal information entered in forms may be masked to protect your privacy."
GDPR Compliance
For visitors in the European Union:
- Legal basis — Processing is based on legitimate interest (improving user experience) or consent
- Consent — For analytics collected via Shopify Web Pixels, we honor the consent signals from Shopify's Customer Privacy framework. In regions that require consent, our pixel only collects data after the visitor grants analytics consent
- Data minimization — We only collect data necessary for the service
- Right to access — Visitors can request access to their data through you
- Right to deletion — You can delete visitor data from ReplayPRO
- Data portability — Contact us if you need data in a portable format
CCPA Compliance
For California residents:
- Right to know — Information about data collection practices (this policy)
- Right to delete — Request deletion of personal information
- Right to opt-out — We do not sell personal information
- Non-discrimination — We do not discriminate against users who exercise their rights
Cookies and Tracking
ReplayPRO uses cookies to:
- Identify visitors — A persistent cookie identifies returning visitors
- Track sessions — Session cookies track activity during a visit
These cookies are first-party cookies set on your store's domain.
Children's Privacy
ReplayPRO is not intended for use on websites directed at children under 13. We do not knowingly collect data from children.
Data Retention
- Session recordings — Retained based on your plan and storage limits
- Visitor profiles — Retained while your account is active
- Analytics data — Aggregated data may be retained for trend analysis
- Order and customer analytics — Retained only as long as needed for reporting and anomaly detection while your account is active
- After uninstall — All data is deleted within 30 days of uninstallation
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting a notice in the app
- Sending an email to your registered address
- Updating the "Last updated" date above
Contact Us
If you have questions about this Privacy Policy or our data practices:
- Use the chat on our Contact page
- Include your store name or myshopify domain in your message
Related Topics
- Settings - Configure privacy settings
- Session Recordings - Understanding what's recorded
- Excluded Visitors - Stop tracking visitors
- Access Control - Block visitors
- FAQ - Common questions