Privacy Policy
This app helps Commerce7 merchants collect post-purchase survey responses on the order receipt page. It is operated on Cloudflare Workers. This page describes what we store, how long we keep it, and how to request deletion.
Who this covers
We process data on behalf of the installing merchant (the Commerce7 tenant). Shoppers interact with a survey iframe on that merchant’s receipt page. Staff use the settings, reports, and customer-tab iframes inside Commerce7 Admin.
What we collect
- Merchant / installer: Commerce7 tenant id, installer name and email, company profile snapshot from Commerce7 (company name, country/state, store URL).
- Staff activity: name, email, role, and (when available) client IP for survey/settings changes and admin job halt/resume.
- Survey answers: answers JSON keyed by survey and order id, including optional free-text. Merchants may collect personal data if they ask for it in a text question.
- Operational identifiers: order id, customer id (Commerce7 UUIDs), impression and frequency-cap timestamps.
- Writeback to Commerce7: structured answers may be written to order/customer
appDataand notes in the merchant’s Commerce7 account (not stored twice as a CRM).
We do not store payment card data, phone numbers, or physical addresses as first-class fields. Customer name and email shown in reports are fetched live from Commerce7 and are not kept as a profile table.
How we use it
To show the right survey, prevent duplicate responses, display merchant reports, write results back to Commerce7 when enabled, and operate/secure the app (auth, rate limits, audit logs, uninstall cleanup).
Legal bases (GDPR)
We act as a processor for survey answers the merchant chooses to collect. Merchant staff data is processed to provide the app (contract) and to secure it (legitimate interest). Shopper data is processed under the merchant’s instructions and privacy notice.
Retention
- Uninstall: settings are cleared immediately after we verify the app is no longer installed. Survey definitions, responses, impressions, and related rows are hard-deleted (CASCADE) within 30 days.
- Audit logs: activity events are kept for 12 months, then pruned.
- Cloudflare Workers Logs: platform invocation logs are retained by Cloudflare for 7 days and are not our long-term audit archive.
Sharing
Infrastructure is Cloudflare (Workers, D1, KV, Queues, Access). We do not sell personal data. Commerce7 receives writeback the merchant enables. We notify Commerce7 of security incidents as required by their App Developer Security Policy.
Security
HTTPS in transit. D1 and KV are encrypted at rest by Cloudflare (AES-256). Secrets (Commerce7 app secret, webhook credentials) are stored as Worker secrets, not in the client. Admin tools sit behind Cloudflare Access.
Your rights
Merchants and their customers may request access, correction, or deletion. We complete deletion and access requests within 30 days, and cooperate with Commerce7 on requests involving their customer data within 5 business days. Uninstalling the app triggers the retention schedule above.
To make a request, contact the merchant you purchased from, or URSA6 at the support address listed with this app in the Commerce7 App Store.
Children
This app is not directed at children. Merchants should not use free-text questions to solicit data from minors.