Privacy Policy
Effective Date: September 15, 2026 | Last Updated: September 15, 2026
1 Introduction & Overview
Welcome to Zix Hero Sections ("we," "our," or "us"). Zix Hero Sections is a Shopify embedded application designed to enable Shopify merchants to easily add, customize, and publish modern, high-converting banner and hero sections into their online store themes without writing code.
We prioritize the privacy and security of your data. This Privacy Policy describes how we collect, use, process, and protect information when you install and use our application in connection with your Shopify store.
2 Information We Collect
To provide our theme section services, we only collect the minimum required data necessary to operate the application within Shopify:
Shop domain (e.g., your-store.myshopify.com), store name, merchant contact email, currency, timezone, and Shopify access tokens granted during authentication.
Theme IDs, section settings, template configurations, customized headlines, colors, and layout selections created in the section editor.
Important: No Customer Personal Data Collected
Zix Hero Sections does NOT collect, store, or track your end-customers' personal identifiable information (PII). We do not collect customer names, phone numbers, shipping addresses, payment cards, or shopper browsing history.
3 How We Use Your Information
We use the data collected strictly for the following operational purposes:
- To install, activate, and inject hero sections into your Shopify store themes via theme app extensions.
- To save and manage your section configurations, presets, and customized banner designs.
- To manage Shopify billing plans and subscription status.
- To verify your store’s identity and maintain secure authenticated sessions via Shopify OAuth.
- To respond to support inquiries and provide troubleshooting assistance.
4 Shopify Mandatory Compliance & GDPR / CCPA
In compliance with Shopify Partner policies, General Data Protection Regulation (GDPR), and California Consumer Privacy Act (CCPA), our app implements the mandatory Shopify privacy webhooks:
5 Data Sharing & Third-Party Service Providers
We never sell, rent, or trade your data to third parties, advertisers, or data brokers. Data is processed exclusively by trusted infrastructure providers required to deliver the service:
- Shopify Inc.: Authentication, billing processing, and theme API management.
- Hosting Infrastructure (Vercel): Cloud hosting, serverless execution, and CDN delivery with automated SSL/TLS encryption.
- Database Provider (PostgreSQL): Encrypted persistent storage for session tokens and section configuration data.
6 Data Retention & Deletion
We retain merchant data only as long as you maintain an active installation of Zix Hero Sections.
When you uninstall the application from your Shopify admin, Shopify triggers an app/uninstalled webhook. Upon receipt, our server invalidates session tokens and deactivates your shop profile. Upon receiving the shop/redact request, all stored data associated with your store is permanently purged from our databases.
7 Security Safeguards
We maintain industry-standard security safeguards to protect your information:
- All network transmissions use HTTPS encryption with TLS 1.3.
- Session tokens and API secrets are securely stored with environment-level access controls.
- Every incoming Shopify webhook request is authenticated using HMAC-SHA256 signature verification.
8 Your Rights & Contact Information
Under applicable privacy laws (such as GDPR and CCPA), you have the right to request access to the data we hold about your store, request corrections, or request deletion of your data at any time.
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our privacy and support team:
Zix Hero Sections Support
Email: support@zixherosections.com
Application URL: https://zixherosections.vercel.app