Privacy, stated plainly.

This policy describes what the Hypothesists app ("the app", "we") collects, why, and what happens to it. It is written to be read, not skimmed past.

Who we are

Hypothesists is a conversion research practice and the developer of the Hypothesists app for Shopify. Contact: privacy@hypothesists.com.

What we collect, and why

• Store & account data. Your shop domain, plan, configuration, and the app settings you choose. Needed to run the app.
• Storefront events. Page views, product views, add-to-carts, and checkout steps, collected through Shopify's Web Pixel sandbox, associated with anonymized visitor identifiers, UTM parameters, device type, and coarse geography. Used solely to compute your store's metrics and experiment results.
• Order data. Orders, refunds, and customer records received by webhook and, at install, a one-time backfill of order history. Used to compute AOV, LTV cohorts, and refund-adjusted metrics. This is why the app requests order history access.
• Survey answers. If you enable the attribution survey, your customers' answers to "How did you hear about us?".

We do not collect customer payment details. We never sell or rent any data, and we do not use one store's data to benefit another.

Retention

Raw storefront events are deleted after 30 days. Long-term reporting is served from aggregated statistics that do not identify individual visitors. Order-derived records persist while the app is installed so your LTV cohorts stay accurate.

GDPR & privacy requests

The app implements Shopify's mandatory compliance webhooks. When a customer requests their data or its deletion through your store, or when you uninstall the app, we receive customers/data_request, customers/redact, and shop/redact and act on them automatically. Uninstalling the app schedules deletion of your store's data.

Subprocessors

The app runs on Vercel (hosting), Neon (database), Resend (transactional email), and Sentry (error monitoring). Each processes data only as needed to provide the service.

Cookies

The embedded admin app authenticates with Shopify session tokens and sets no third-party cookies. Storefront measurement runs inside Shopify's Web Pixel sandbox.

Security

All data moves over TLS. Access to production systems is restricted and logged.

Changes

If this policy changes materially, installed stores are notified in-app and by email before the change takes effect.