Privacy Policy

PopupGenius (“the app”, “we”, “us”) is a Shopify app and a standalone web app (app.popupgenius.app) that creates AI-designed popups. This policy explains what data we handle when a merchant installs the app or creates an account, and when shoppers interact with the popups it creates. Questions? Email founder@popupgenius.app.

Data we collect

• Merchant data: your Shopify store domain, basic store info and the store owner's email address or, for a standalone account, your name, email address, a hashed password and the website you register; the popups and settings you create, your plan/billing status, and the messages you send to the in-app AI designer.
• Billing data (standalone accounts only): paid plans are sold by Freemius, our merchant of record, which handles your payment details. We receive your plan, its status and the email tied to the purchase, never your card number.
• Shopper data (only when you enable email/lead capture): the email address — and optionally first name and phone number — a shopper submits in a popup, together with their marketing consent. We also record popup events (views, clicks, add-to-cart, purchases) to produce your analytics.

How we use it

• Run the app: create and show popups, generate designs with AI, apply discounts, and show you analytics.
• Sync captured leads to your Shopify customer list — only with the shopper’s consent.
• Send account emails such as email verification and password reset (standalone accounts).
• Email you about PopupGenius: help with finishing setup and a warning if a live popup stops showing. Check-ins, a short question about the app (on Shopify with a link to leave a review) and occasional product news are sent only if you allow them: in the Shopify app through the opt-in on the Home page; for standalone accounts by ticking “Email me tips and news” when you sign up or later under Account → Emails (accounts created before that box existed were told at sign-up and get them unless they turn them off). Every such email has a one-click unsubscribe, and you can withdraw your consent or object at any time. We never email your customers. On Shopify the store owner's email is deleted when Shopify asks us to erase the store's data after an uninstall.
• Provide support and improve the product.

We do not sell personal data, and we do not use merchant or shopper data from the app for advertising. Analytics and advertising on this website are separate and are covered in “This website” below.

Who we share it with

We share data only with the providers needed to run the service:

• Shopify — the platform your store and our app run on, if you use PopupGenius on Shopify.
• Freemius — sells and bills paid plans for standalone accounts as merchant of record, handles the payment details, and runs the affiliate program for standalone accounts (referral links, clicks and affiliate payouts).
• Shoffi — runs the affiliate program for the Shopify app. When a store installs the app, we tell Shoffi the store's domain and the IP address of the person who installed it, so the install can be matched to an affiliate's link.
• Google (Workspace) — delivers the emails we send you: account emails (verification, password reset) and the emails about PopupGenius described above.
• Google (Gemini API) — processes your design prompts and chat messages to generate popup designs.
• Google (Analytics & Ads) — measures traffic to this website, and counts sign-ups and plan purchases at app.popupgenius.app. See “This website” below.
• Cloudflare (Turnstile) — checks that a sign-up, log-in or password reset request at app.popupgenius.app, or a support chat started on this website, came from a person. Cloudflare sees your IP address and browser details to do that; we do not store the result.
• OpenRouter — passes the text of a support chat to the AI model that drafts our replies.
• Telegram — delivers each support chat message to our team's private group, so a person can read it and reply.

Apart from the website measurement and the support chat described below, we do not share personal data with anyone else.

This website

This website (popupgenius.app) uses Google Analytics and Google Ads to measure how many people visit, and how many go on to our Shopify App Store listing or to create an account at app.popupgenius.app. It involves no merchant or shopper data from your store.

• If you are in the EEA, the UK or Switzerland: nothing is stored on your device unless you accept. We ask with a banner on your first visit. Until you accept, Google receives only cookieless measurement signals, which include your IP address and browser details, and we cannot recognise you across visits or use anything for personalised advertising. You can change your answer at any time with “Cookie choices” in the footer.
• Elsewhere: Google Analytics and Google Ads set cookies on your device so we can measure visits and see which of our ads led to an app install or a new account.
• We record when someone clicks an install or a sign-up button, and which button on the page it was. If you reached us from one of our own ads, that ad's click identifier travels in the link to app.popupgenius.app, so we can tell which ad paid for the visit. We never receive your name, email address or payment details from this.
• Sign-ups and purchases: when you create an account or buy a plan at app.popupgenius.app, our server tells Google Analytics that it happened, with the plan and its price. It never sends your name, email address or payment details. If you accepted cookies on this website, the event is linked to that visit so we can see which page or ad led to it, and we keep the Google Analytics identifier from that cookie with your account. If you did not, it is only counted, without being linked to you or your device. Choosing “Reject” also deletes the Google cookies an earlier “Accept” left on your device.
• Videos: some pages show a video. Until you press play, nothing is loaded from YouTube — the image you see is served from this site. Pressing play loads the player from youtube-nocookie.com, which is when Google receives your IP address and browser details and may store something on your device. If you never press play, YouTube is never contacted.

You can opt out of Google Analytics in any region with Google’s browser add-on, or by blocking cookies for this site in your browser settings. Blocking it does not affect anything on the site.

The support chat button comes from our app server (app.popupgenius.app), which sees your IP address when it sends the button, like any web server. Nothing is stored on your device and no conversation starts until you send your first message. Then we store the conversation on our servers so we can reply, with the page you opened it on. An AI assistant answers first, through OpenRouter; every message, including any image you send, also goes to our team in Telegram, and a person can step in and reply. When the chat passes you to a person, it offers to take an email address in case you leave first; if you write one, we use it only to answer that conversation. Before the first message, Cloudflare Turnstile checks that you are a person, and Cloudflare sees your IP address to do that. We keep only a one-way hash of your IP address, for two days, to limit abuse. Your browser keeps an anonymous token for the chat in local storage. We delete the conversation 365 days after the last message, or sooner if you ask us, and clear the Telegram copies by hand. This is separate from the analytics cookies above.

Affiliate applicants

If you apply to our affiliate program, we keep the details you send us (your name, your website or channel, your audience size and how you plan to promote PopupGenius) to review your application and run the program. If you are approved, your payout details are held by Shoffi (Shopify app referrals) or by Freemius, which PopupGenius uses to pay website affiliates. Ask us to delete your application data at any time at founder@popupgenius.app.

Retention & deletion

We keep data while the app is installed or your account exists. Captured shopper contact details are automatically purged after a limited, configurable retention period. We honour Shopify’s data-request and data-erasure webhooks (customers/data_request, customers/redact, shop/redact). When you uninstall the app, delete your account from inside the app, or ask us to, we delete your data.

Your rights

Merchants and shoppers can request access, correction, deletion or a copy of their personal data (GDPR / CCPA). Shoppers should first contact the store they shopped with; merchants and data requests can email founder@popupgenius.app.

Security

We use reasonable technical and organisational measures to protect data, including encryption in transit, access controls, and EU-based hosting.

Changes

We may update this policy from time to time; the date at the top shows the latest version.

Contact

Questions about this policy or your data? Email founder@popupgenius.app.