ExitTap Privacy Policy

1. Introduction

ExitTap ("we", "our", or "us") is a Shopify application that helps merchants recover abandoning visitors using exit-intent popups. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By installing ExitTap from the Shopify App Store, you agree to the collection and use of information as described in this policy.

2. Information We Collect

We collect the following categories of information when you install and use ExitTap:

Store information

• Your Shopify store domain and shop name
• Store owner email address (used for digest notifications only)
• App installation date

App usage data

• Popup offers you create (name, type, headline, button text, discount settings)
• Trigger and design settings you configure
• Popup impression events (which popup was shown, which signal fired, whether the visitor clicked)
• Signal events (which exit signal was detected on your storefront)
• Recovered order data (order ID and value when a discount code from ExitTap is used at checkout)

Visitor data (your customers)

• Anonymous session identifiers stored in the visitor's browser (used for popup cooldown logic)
• Cart value at the time of popup display (to enforce minimum cart value rules)
• No personally identifiable information (name, email, address) about your customers is ever collected or stored by ExitTap

3. How We Use Your Information

• To operate and deliver the ExitTap service to your store
• To display the correct popup offer when a visitor exit signal is detected
• To generate revenue and analytics reports inside the app dashboard
• To send optional weekly digest emails summarising your store's performance
• To enforce plan limits (impression caps, offer limits) on the free plan
• To improve the app and fix bugs

We do not sell, rent, or share your data with third parties for marketing purposes.

4. Data Storage & Security

All data is stored in a PostgreSQL database hosted on Railway (railway.app), a SOC 2-compliant infrastructure provider located in the United States. Data is encrypted in transit using TLS and encrypted at rest.

Shopify session tokens used to authenticate the app are stored securely using Shopify's official session storage mechanisms.

5. Third-Party Services

We use the following third-party services to operate ExitTap:

• Shopify — app platform and billing. Governed by Shopify's own privacy policy.
• Railway — database hosting. Governed by Railway's privacy policy.
• Resend — transactional email delivery for weekly digest emails. Governed by Resend's privacy policy.

6. Data Retention

We retain your data for as long as ExitTap is installed on your store. If you uninstall the app, we will delete your store's data within 30 days of receiving the uninstall webhook from Shopify.

You may also request immediate deletion of your data at any time by contacting us at support@bgstudios.app.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about your store
• Correct inaccurate data
• Request deletion of your data (right to be forgotten)
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at support@bgstudios.app and we will respond within 30 days.

8. GDPR & CCPA Compliance

ExitTap is designed to comply with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We act as a data processor on behalf of merchants (the data controllers) with respect to any customer data that passes through the app.

No personal data about end customers is stored. Anonymous session identifiers used for popup cooldown logic are stored only in the visitor's browser and are not transmitted to our servers.

9. Cookies

ExitTap sets a single cookie (or localStorage entry) in your store visitors' browsers to track popup cooldown periods — this prevents the same visitor from seeing the popup repeatedly. This cookie contains no personal information and expires based on your configured cooldown setting.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of significant changes by updating the "Last updated" date at the top of this page. Continued use of ExitTap after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

ExitTap by BG Studios
support@bgstudios.app

© 2026 ExitTap by BG Studios. All rights reserved.