QuizLanding Privacy Policy

QuizLanding ("the app") is a Shopify app operated by Lusson LLC, 30 N Gould St, Sheridan, WY 82801, USA ("we", "us"). It lets merchants build quiz funnels on their Shopify store, capture leads from those quizzes, and sync them to their own Shopify customer list.

This policy explains what personal data the app processes, why, and what happens to it. Questions: info@quizlanding.com.

The short version

• We process shopper data only to deliver quiz results and lead capture for the merchant whose store you visited. The merchant is the data controller; we process on their behalf.
• Quiz analytics are anonymous — we never store what you typed alongside analytics events.
• A shopper's typed details (email, name, phone) go to one place: that merchant's own Shopify customer list, and to an email service (e.g. Klaviyo, Mailchimp) only if the merchant has connected one.
• We never sell personal data, never share it across merchants, and never use it to train AI.
• Data is deleted when the merchant uninstalls the app or when a deletion request arrives through Shopify.

Data we process for merchants (about their shoppers)

When a shopper fills in a quiz on a merchant's store, we process:

Data	Where it comes from	Why
Quiz answers (selected options)	The quiz	Personalized results; optional customer tags for the merchant's segmentation
Typed input values — email, name, phone, or other fields the merchant added	Input fields the shopper fills in	Lead capture: creating/updating the customer record in the merchant's Shopify admin
Marketing consent state and the exact consent text shown	The opt-in checkbox, if the quiz shows one	Recording email marketing consent on the merchant's Shopify customer, as the shopper chose
A random session identifier (browser storage)	Generated in the shopper's browser	Joining the steps of one quiz run together; not used to track shoppers across sites

Quiz analytics (views, answer counts, funnel drop-off, purchases attributed to a quiz) are stored without any personal data — typed values never enter the analytics pipeline.

Our AI features (quiz generation, the editor assistant) process merchant-provided content — product details, brand copy, the merchant's website text — not shopper personal data.

Where the data goes

• The merchant's Shopify store — the whole point. Leads become customers in the merchant's own Shopify admin, with quiz tags and, where consent exists, email marketing status.
• Email services the merchant connects (e.g. Klaviyo, Mailchimp) — only if the merchant explicitly enables such an integration.
• Nowhere else. No advertising networks, no data brokers, no cross-merchant sharing, no selling.

Sub-processors

We use vetted infrastructure providers to run the app: Vercel (application hosting), Fly.io (background workers), Supabase (database), Cloudflare (event ingestion), ClickHouse Cloud (anonymous analytics), and Anthropic/OpenAI (AI features — merchant content only). All connections use TLS; data is encrypted at rest by these providers.

Retention and deletion

• Lead data is kept only while the merchant uses the app for the purpose of lead capture.
• When a merchant uninstalls the app, Shopify triggers a shop data erasure request; we delete all of that shop's quizzes, leads, and settings on receipt.
• When a customer asks a merchant (or Shopify) to delete their data, Shopify sends us a redaction request and we delete every lead matching that customer's email or phone for that store.
• You can also email info@quizlanding.com for deletion requests; we honor them within 30 days.

Security

Data is encrypted in transit (TLS) and at rest. Connected integration API keys are additionally encrypted at the application level. Access to production systems is limited to the people who operate the app, behind strong authentication with two-factor auth. We maintain a security incident response process; affected merchants are notified without undue delay if their data is ever involved in an incident.

Merchants' responsibilities

Merchants control what their quiz asks and how marketing opt-in works (explicit checkbox, subscribe-on-submit, or off). Merchants are responsible for configuring this in line with the laws that apply to their customers and for their own privacy disclosures to shoppers.

Your rights

If you are a shopper, the merchant whose store you visited is your data controller — direct access/deletion requests to them, and they flow to us automatically through Shopify. EU/EEA, UK, California, and similar rights (access, correction, deletion, portability, objection) are honored through that process or directly via info@quizlanding.com.

Changes

We'll update this page when our practices change and revise the date at the top. Material changes are announced to merchants inside the app.