Privacy Policy

Last updated: July 24, 2026

Smart Form Collector helps Shopify merchants create storefront forms, collect form submissions, manage submitted data, export records, and receive merchant email notifications.

Information we process

• Shop information required to install and operate the app, such as shop domain, access status, billing plan, and app settings.
• Form configuration created by merchants, including field labels, field types, display settings, notification settings, and embed settings.
• Form submissions entered by storefront visitors, which may include name, email address, phone number, message content, selected options, uploaded files, source URL, user agent, and a hashed IP value for abuse prevention.
• Operational records such as webhook events, error logs, and billing status needed to provide and maintain the service.

How we use information

• To provide form creation, storefront embedding, submission storage, merchant notifications, and CSV export features.
• To authenticate Shopify shops and keep the app available inside Shopify Admin.
• To process Shopify billing subscriptions and plan limits.
• To prevent abuse, troubleshoot errors, improve reliability, and comply with Shopify requirements.

Sharing and third parties

We do not sell personal information. Data is shared only when required to operate the app, such as Shopify platform APIs, hosting infrastructure, email delivery services configured for notifications, or when required by law.

Data retention and deletion

Merchant data and form submissions are retained while the app is installed and active. After a shop uninstalls the app, shop-related data is scheduled for deletion or anonymization within 30 days, unless a longer retention period is legally required.

Shopify privacy webhooks

The app receives Shopify mandatory privacy webhooks, including customers/data_request, customers/redact, and shop/redact. Requests are verified with HMAC, stored for audit, and processed automatically where possible: customer data requests are matched against form submissions; customer redaction anonymizes related submissions; shop redaction removes or anonymizes shop-scoped app data and tokens after uninstall.

Security

We use HTTPS, Shopify OAuth, webhook HMAC verification, controlled database access, and operational access controls to protect app data. No method of transmission or storage is completely risk-free, but we take reasonable measures to protect information.

Contact

For privacy requests or questions, contact us at support@lc-web.cn.