1. Overview
Zammer (“we,” “our,” “us”) provides messaging tools that allow Shopify merchants (“Merchants”) to send SMS and RCS messages to their customers (“Customers”) for purposes such as order updates, abandoned-cart reminders, and promotions. This Privacy Policy explains how we collect, use, and protect information processed through our platform.
2. Information We Collect
- Merchant Data: Shopify store identifiers, contact details, configuration settings.
- Customer Data: Name, phone number, order or cart information, and message history (sent, delivered, failed).
- Technical Data: IP addresses, API events, device metadata, and usage analytics.
We do not collect payment-card data; all billing occurs through Shopify.
3. How We Use Information
- Deliver SMS and RCS messages via Twilio and carrier partners;
- Maintain opt-in and opt-out records;
- Provide merchant support and troubleshooting;
- Monitor service performance and prevent abuse;
- Comply with legal and carrier requirements.
We do not sell or rent personal data to third parties for marketing purposes.
4. Data Roles and Responsibilities
Merchants act as the Data Controllers for their Customer data. Zammer acts as a Data Processor, handling message transmission and storage on behalf of Merchants. Merchants must obtain valid customer consent before sending messages and must comply with applicable privacy laws (including GDPR and TCPA where relevant).
5. Data Storage and Security
All data is stored on Hetzner servers located in the European Union. We use industry-standard administrative, technical, and physical safeguards to protect data against unauthorized access or disclosure. Transmission to carriers occurs over encrypted channels.
6. Data Retention
Message records and metadata are retained only as long as necessary to deliver and log messages, resolve disputes or technical issues, or comply with legal and regulatory requirements. When data is no longer needed, it is securely deleted or anonymized.
7. App Uninstall and Data Handling
When a Merchant uninstalls the Zammer app from their Shopify store, Zammer immediately disables all messaging functionality and stops processing Customer data on behalf of the Merchant. No further SMS or RCS messages are sent after uninstall.
Access to Shopify APIs is automatically revoked upon uninstall, and Zammer ceases all data synchronization, message delivery, and background processing for the uninstalled store.
Zammer may retain limited records, such as consent logs, opt-out history, and message delivery metadata, solely for legal compliance, audit, dispute resolution, or abuse-prevention purposes, as required by law or carrier obligations. Retained data is not used for messaging or marketing and is securely stored or anonymized in accordance with this Privacy Policy.
8. Individual Rights
Merchants and Customers may request to access, correct, or delete their data by contacting [email protected]. We may require verification before processing requests.
9. Children’s Privacy
Our service is not intended for individuals under 16 years of age, and we do not knowingly collect data from minors.
10. Policy Updates
We may update this Privacy Policy from time to time. Revised versions will be posted on our website, and Merchants may be notified via email or in-app message.
11. Contact Us
© 2025 Itzhak Smocha LTD. All rights reserved.