Zavnex Support — Privacy Policy & Merchant Data Terms (DRAFT)

Status: DRAFT for the Shopify App Store listing — not yet published. Prepared 2026-11-07; updated the same day after the retention purge and the scheduled backups went live. One item remains before listing (see "Still to do" at the bottom).

Plain-language version. Zavnex Support ("the app") is built and run by Zavnex (Kennesaw, GA). Contact: pourband@gmail.com.

What the app does

It answers a store's shoppers' questions, day and night, using only the store's own published information: products, pages, and store policies.

What we collect, and why

From the store (the merchant who installs the app):

the store's own policies (privacy, refund, shipping, terms).

"is there a discount?" and "how much is shipping?"

morning report and instant alerts.

learn answers the owner wants it to give.

From a shopper visiting the store:

owner sees in the morning report.

only when the agent cannot answer and the shopper wants a human follow-up. The email is shown to the store owner and to nobody else.

types in. These are checked live against Shopify at that moment and are never saved into the knowledge base. The order itself is never synced or stored.

What we do NOT collect

them and never reads the Shopify customer record.

request access to orders older than the single one being checked.

Who else sees the data

OpenAI's gpt-4o-mini model together with the relevant passages from the store's own public content, so it can write a short answer. The shopper's email address and any order details are not sent to OpenAI.

API, with only the permissions the merchant approved at install.

Nobody else receives the data. We never sell personal data, and we never use it for advertising.

How long we keep it

installed, and are refreshed from Shopify on every sync.

automatically.** This runs daily inside the app; it covers conversation logs, reports and alerts, captured requests, and offer records.

that store completely (products, conversations, reports, settings). A shopper can also ask the store owner for their data or for it to be deleted, and Shopify forwards that request to us — we delete that shopper's conversations.

Security, in plain words

never see another store's data.

other staff. Passwords and keys are stored as secrets, never in code or in chat.

INCIDENT_RESPONSE.md).

Merchant terms (the short version)

app is permission to read the items listed above, only to answer shoppers' questions and to send the owner reports.

is wrong, the answer will be wrong — the owner can fix it in the store or in the notes box.

store's data from our side.

Still to do before listing (honest list)

  1. Automatic 90-day deletion of old conversations and reports —

done 2026-11-07: built into the app (stage3-fix14) and running on its daily tick.

  1. Scheduled backups (Fly volume snapshots) — **done

2026-11-07**: Fly's scheduled snapshots are on (daily, kept 5 days, on the encrypted volume), so the "encrypt your data backups" answer given to Shopify is literally true.

  1. Pick the final public home for this text (app website or listing

page) and the date it takes effect.