Privacy Policy

Zeedy ("we", "our", or "us") is a Shopify app and web portal that helps brands manage influencer seeding campaigns. We are operated by Zeedy and can be reached at privacy@zeedy.xyz.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

From Shopify merchants (store owners and staff):

• Shopify store domain and access tokens (used to fetch products and create draft orders on your behalf)
• Name and email address of the portal account holder
• App usage data: campaigns, seedings, and influencer records you create within Zeedy

From influencers:

• Social media handle, name, email address, country, and follower count — entered manually by the merchant
• Shipping address — collected when an influencer completes the checkout for a seeding draft order
• Clothing sizes — optionally stored to pre-fill future seedings

From your store's orders (Mystery Box automation only):

• Order contents (products, variants and sizes), order total, creation time and order tags — processed transiently to decide whether a qualifying order receives a free gift item
• We do not collect or store your customers' names, email addresses, phone numbers or shipping addresses from these orders. Logs record only the order ID and the decision taken (gift applied / skipped / error)

Automatically collected:

• Server logs (IP addresses, request timestamps) for security and debugging — retained for 30 days
• Session cookies required for portal authentication

• To provide the Zeedy service: creating draft orders, tracking seeding status, and managing influencer records
• To run the optional Mystery Box automation: evaluating qualifying orders and adding a free gift line item to them via Shopify's Order Editing API
• To authenticate portal users and maintain secure sessions
• To send invite links to team members you add to your portal
• To comply with legal obligations, including GDPR data subject requests

We do not sell your data. We do not share your data with third parties except as described in Section 5.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract performance — processing necessary to deliver the Zeedy service you have subscribed to
• Legitimate interests — security logging, fraud prevention, and service improvement
• Legal obligation — responding to GDPR data subject requests and complying with applicable laws

We share data only in these limited circumstances:

• Shopify — we use the Shopify Admin API to fetch product information and create draft orders. Shopify's own privacy policy governs their handling of that data.
• Infrastructure providers — we use Neon (PostgreSQL hosting) and Vercel/Render for server hosting. These providers process data only as instructed and under data processing agreements.
• Legal requirements — we may disclose data if required by law, court order, or to protect our legal rights.

We retain your data for as long as your Shopify store has Zeedy installed. When you uninstall the app, we begin the deletion process. All store data (influencers, seedings, campaigns, portal users) is permanently deleted within 48 hours of uninstallation in accordance with Shopify's GDPR requirements.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@zeedy.xyz. We will respond within 30 days.

For influencer data deletion requests, merchants can redact records directly within the Zeedy portal, or contact us and we will process the request manually.

The Zeedy portal uses a single first-party session cookie (__portal_session) strictly to keep you logged in. We do not use advertising cookies or third-party tracking.

The Shopify embedded app component uses cookies set by Shopify's App Bridge for authentication. These are governed by Shopify's cookie policy.

We protect your data using industry-standard measures: all data is encrypted in transit (TLS), passwords are hashed using scrypt, and access tokens are stored securely in our database. We conduct regular security reviews of our codebase.

Zeedy is a business tool intended for use by adults. We do not knowingly collect personal data from anyone under the age of 18.

We may update this Privacy Policy from time to time. We will notify active merchants of material changes by updating the "Last updated" date at the top of this page. Continued use of Zeedy after changes are posted constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: