CreditWhere Attribution Survey: privacy policy

Last updated: October 19, 2026

What the app does

CreditWhere shows merchants' customers one optional question after checkout ("How did you hear about us?") on the Thank you and Order status pages, and compares the answers with the attribution data Shopify already records for the order.

Data we collect

• The answer the customer chose, optional text they typed, the page where they answered and their checkout language.
• From Shopify, for answered orders only: order ID, order name, creation date, total and currency, whether it was a first order, and the first and last visit source (source, UTM parameters, referrer).
• Store information needed to run the app: shop domain, access token, survey settings and plan usage.

We do not collect or store customer names, email addresses, phone numbers, postal addresses, customer IDs or IP addresses. IP addresses are used only in memory for rate limiting and are never written to storage.

How we use it

Only to show the merchant reports about their own store. Answers are also written to the order as metafields in the merchant's Shopify admin. We do not sell data, share it with advertisers or combine it across stores.

Retention and deletion

• Responses are kept for 24 months by default. Merchants can shorten this or delete all responses in the app settings.
• When Shopify sends a customer redaction request, we delete answers for that customer's orders.
• When a merchant uninstalls the app, all store data is deleted after Shopify's shop redaction request (48 hours after uninstall).

Security

Data is encrypted in transit (HTTPS) and at rest by our database provider. Access is limited to the app operator.

Contact

Questions or data requests: pigi.support@gmail.com