This Privacy Policy explains how Z Dzine ("we," "us," or "our") processes information when merchants use EZ Forms (the "App"), shoppers submit a form on a merchant's storefront, or people contact us about the App.
1. Information we process
Store and account information
We process the Shopify store domain and identifiers, installation and authentication records, subscription status, and usage counters needed to provide access and enforce the selected plan. We process theme and form-placement identifiers and observations to help merchants confirm their setup. Where Shopify supplies a signed-in customer identifier through the app proxy, we may associate it with the response.
Form configuration and responses
We store merchant-created form names, fields, choices, conditional rules, appearance settings, images, notification recipient addresses, success messages, and redirect destinations. Responses may contain names, email addresses, phone numbers, countries, dates, selections, messages, or other information requested by the merchant, together with submission identifiers and timestamps.
Uploaded files
Where a plan and form support uploads, we process the uploaded content, filename, file type, size, Shopify file identifier, URL, and tracking information used to associate the file with a response or clean up unused uploads. Merchant images and submission attachments are uploaded to Shopify's file infrastructure.
Support and technical records
We process support correspondence and limited operational records, which may include IP addresses, request timestamps, error details, and browser information, to answer requests, troubleshoot problems, limit abuse, and secure the service.
2. How information is used
- Authenticate merchants and save, display, and operate forms.
- Validate submissions, associate uploads with responses, and make responses available to the merchant.
- Send submission notifications to the address configured by the merchant.
- Manage subscriptions, enforce plan limits, and report usage.
- Provide onboarding, support, security, and troubleshooting.
- Handle access, deletion, and other privacy requests and meet applicable obligations.
3. Email notifications
When enabled by a merchant, submission notifications are sent through Resend. This involves processing the configured recipient address, form and store details, response content included in the notification, and delivery information. We keep notification queue and delivery-status records to manage sending and retries. The recipient's email provider also processes the message. Merchants must use an authorized recipient address and protect access to that inbox.
Deleting a response in EZ Forms does not recall an email that has already been sent or erase copies, downloads, or forwards held by recipients. The merchant must manage those copies separately. See Resend's privacy policy.
4. Sharing and service providers
Information is processed by Shopify to operate its platform and host files, by Resend for notification delivery, and by the infrastructure and support providers needed to run the App. Information is also shared with the merchant and authorized notification recipients. We may disclose information when required by law, to protect rights and security, or in a business transfer subject to applicable safeguards. We do not sell form responses or use their contents for our own targeted advertising.
5. Retention and deletion
Form settings and responses are retained while needed to provide the service, unless the merchant deletes them or a valid privacy request requires their removal. Merchants can delete responses in the App. Deleting a response detaches its tracked uploads for cleanup; failed file deletions may be retried. Monthly submission usage is retained separately for plan enforcement and is not reset by deleting responses.
We process Shopify customer-data requests and shop-redaction requests through Shopify's required mechanisms. After uninstalling, store data in our App database is removed through the shop-redaction process. Uninstallation revokes access to Shopify, so it does not guarantee removal of files already stored in the merchant's Shopify Files. Merchants should delete unwanted uploads before uninstalling or manage remaining files through Shopify admin.
Previously delivered emails and merchant exports remain under their recipients' control. Records needed for legal obligations, disputes, billing, or security may be retained for those purposes. Where backup copies exist, removal from the live service may precede expiration of those copies; they are not intended for ordinary active use.
6. Privacy rights and requests
Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of personal information, or restrict or object to its processing. Shoppers should contact the merchant whose form they completed. Merchants can use the App's Privacy tools and contact support@zdzine.com for help. Include the store domain and enough information to identify the request, but do not send passwords or unnecessary sensitive documents. We may verify identity and coordinate with the merchant or Shopify. You may also have the right to complain to your local data-protection authority.
7. Merchant notices, tracking, and consent
Merchants are responsible for explaining the purpose of their forms, collecting only necessary information, obtaining any required consent, and setting an appropriate retention period. A submission does not by itself give permission for marketing. Tracking tools or other services that a merchant separately adds to its store are governed by that merchant's notices and the relevant provider's practices.
8. International processing and legal bases
Information may be processed outside the country where a merchant or shopper lives because Shopify, email delivery, and hosting services operate internationally. Applicable transfer protections must be respected. Where a legal basis is required, account and service administration relies on our contract with the merchant, security and support may rely on legitimate interests, and some processing is necessary for legal obligations. Merchants are responsible for the legal basis for collecting shopper responses, including consent where required.
9. Security
We use measures such as authenticated merchant access, store-specific access controls, and encrypted connections to protect information. No service can guarantee absolute security. Merchants should restrict staff access, protect notification inboxes, and avoid collecting sensitive information through publicly accessible forms.
10. Children
EZ Forms is a business tool for Shopify merchants and is not directed to children. Merchants must not use it to collect children's personal information without the protections and permissions required by applicable law.
11. Changes and contact
We may update this policy as our service or practices change and will revise the date above. Additional notice will be provided where required. Contact Z Dzine about EZ Forms privacy at support@zdzine.com.