Privacy Policy

Effective: May 1, 2026 · Last updated: May 1, 2026

This Privacy Policy describes how Asked ("Asked," "we," or "us") collects, uses, and protects information when you install or use the Asked app on your Shopify store.

Asked is a post-purchase survey app for Shopify merchants. We've kept this policy plain-language on purpose. If anything is unclear, email us at privacy@useasked.com.

1. Who runs Asked

Asked is operated by TradeHawk HQ ("we"), an independent app developer. You can reach us at:

• Privacy and data requests: privacy@useasked.com
• General support: support@useasked.com

2. What we collect

When a Shopify merchant installs Asked, we collect and store the following:

From the merchant (your store):

• Your Shopify store domain (e.g., your-store.myshopify.com)
• An access token issued by Shopify (used to authenticate the app)
• The survey question, answer choices, and copy you configure inside the app

From your customers (when they interact with the survey):

• The Shopify order ID and order number associated with the response
• The answer choice selected
• The date and time of the response

We do not collect customer names, email addresses, phone numbers, billing addresses, payment information, or any other personally identifiable customer data. Survey responses are linked only to an internal Shopify order identifier, not to a customer profile.

We also record when the survey is shown on a Thank you page (associated with an order ID) so we can calculate response rates. No browser fingerprinting, IP logging, or cross-site tracking is performed.

3. How we use the data

We use the data above only to:

• Operate the app (authenticate your store, render the survey, save responses)
• Show you your survey results in your Asked dashboard
• Provide customer support if you contact us
• Respond to data subject requests (see Section 7)

We do not:

• Sell your data
• Share it with advertisers
• Use it to train AI models
• Use it for any purpose unrelated to operating the Asked app

4. Where the data is stored

Asked is hosted on Vercel and stores data in a managed PostgreSQL database (Neon) located in the United States. Data is encrypted at rest and in transit (TLS).

Our subprocessors:

• Shopify — provides the platform, authentication, and webhook delivery
• Vercel — hosts the application
• Neon — hosts the database

Each of these providers maintains its own privacy and security commitments.

5. Data retention

• While the app is installed: Survey responses, survey settings, and shop session data are retained so your dashboard remains accurate.
• When you uninstall the app: Shopify sends us a shop/redact webhook 48 hours after uninstall. When we receive it, we delete your shop's data from our database.
• Customer redaction requests: When Shopify sends a customers/redact webhook, we remove any survey responses associated with that customer's orders, where applicable.
• Data export requests: When Shopify sends a customers/data_request webhook, we provide any data we hold about the relevant customer (typically: anonymous answer choices linked to that customer's order IDs).

6. Security

We use industry-standard practices to protect your data:

• TLS encryption for all data in transit
• Encrypted database storage at rest
• Access tokens scoped to the minimum permissions Asked needs to function
• No collection of payment information, customer PII, or sensitive data

No system is perfectly secure, but we limit what we collect specifically to reduce exposure.

7. Your rights

Depending on where you or your customers live, applicable privacy laws (such as the GDPR in the EU/UK or the CCPA in California) give the following rights:

• Right to access — ask what data we have
• Right to correction — ask us to fix inaccurate data
• Right to deletion — ask us to delete data
• Right to portability — ask for a copy of the data
• Right to object — ask us to stop processing data

To exercise any of these rights, email privacy@useasked.com. We respond within 30 days. If the request comes from one of your customers, please forward it to us; we will work with you to fulfill it.

8. Children's privacy

Asked is a B2B tool sold to Shopify merchants. We do not knowingly collect data from anyone under 16.

9. Changes to this policy

If we materially change this policy, we'll update the "Last updated" date above and notify merchants by email or in-app notice. Continued use of Asked after a change means you accept the updated policy.

10. Contact

For any privacy question or data request: privacy@useasked.com