How Zetliq handles your data.

01 Who this policy covers

This Privacy Policy explains how Zetliq ("we," "us," "our") collects, uses, and discloses information through the Zetliq: Back in Stock, Preorder app (the "App"), available on the Shopify App Store. It applies to two different people:

• Merchants — the Shopify store owners who install the App ("you," the "Store").
• Shoppers — the Store's own customers, who interact with the App's waitlist, back-in-stock, or pre-order widgets on the Store's website.

If you are a Shopper: the Store is the retailer you did business with, and is the data controller responsible for your personal information under laws like the GDPR. We act as the Store's data processor — we handle data only on the Store's instructions, as built into the App's features, and never for our own independent purposes. If you have a question about how your data was used on a particular website, please contact that store first; you can also reach us directly using Section 12.

02 Information we collect

From Shoppers

When a Shopper joins a waitlist, requests a back-in-stock alert, or places a pre-order through the App's storefront widget, we may collect:

• Email address — required, to hold their place in line and send them notifications.
• Phone number — optional, only if the Store's setup collects it.
• Shopify customer ID — only if the Shopper is logged into the Store, used to recognize them as a returning visitor across devices.
• A first-party device identifier — a cookie and/or browser local-storage value that lets the App recognize the same browser on a later visit, so a Shopper doesn't have to rejoin to see their status. This is functional only — see Section 4.
• Queue and referral activity — which product/variant they're waiting for, their position in line, their personal referral code, who referred them (if anyone), and whether a referral has been verified.
• Purchase outcome — whether they completed a reserved purchase, a pre-order, or a purchase attributed to a referral link, including the order ID and order value, so rewards and analytics work correctly.
• Consent status — if the Store has turned on double opt-in (GDPR-style) confirmation, we record whether and when a Shopper confirmed.

We never collect payment card details, government ID numbers, or precise location data. All checkout and payment is handled directly by Shopify and the Store's own payment provider — never by us.

From Merchants

To operate, the App requests specific Shopify Admin API permissions, and only uses the data behind each for the matching purpose:

• Products & inventory — to detect restocks and know which products a Store's rules apply to.
• Orders & draft orders — to create a Shopper's reserved-purchase draft order, and detect when a reservation, pre-order, or referral-linked purchase is completed.
• Discounts — to issue referral-reward discount and free-shipping codes the Store has configured.
• Gift cards & store credit — to issue store-credit rewards, or an equivalent gift card where a Store hasn't enabled Store Credit.
• Customers — to recognize returning Shoppers and match them to their existing Shopify customer profile where possible.
• Fulfillment orders — to support pre-order fulfillment holds and releases.
• Markets — to route restock notifications to the fulfillment location that can actually serve a Shopper's region.
• Themes — to check, during setup, whether the App's storefront components are installed.

We also receive the Store's shop domain, store name, and billing/subscription status, and generate the authentication tokens needed (via Shopify's standard OAuth) to make the calls above on the Store's behalf.

03 How we use information

We use the information above only to:

• Run the waitlist, back-in-stock, and pre-order features a Store has configured, including fair queue ranking and time-limited purchase reservations.
• Generate and verify referral links, and issue whichever reward a Store has set up (a jump in line, a discount, free shipping, store credit or gift card, or early access).
• Send the transactional emails that go with the above — for example, "you're on the list," "it's back in stock," "your reward unlocked," or a pre-order balance-due reminder.
• Provide the Store with an analytics dashboard, and an optional, read-only AI assistant (Shopify Sidekick) that can answer plain-language questions about that same App data. The assistant can only read a Store's own data to answer that Store's own question — it can never take an action, and it isn't a channel we use to access Shopper data ourselves.
• Bill the Store for its selected subscription plan, via Shopify's own Billing API.
• Provide support to Stores and comply with our legal obligations.

We do not sell personal information, use it for advertising, or share it with data brokers.

04 Cookies & similar tech

The App's storefront widget sets a first-party cookie and/or browser local-storage value so a Shopper who already joined a waitlist sees their own status again on a later visit, instead of being asked to rejoin. That's the only thing it's used for — it is not used for cross-site tracking, advertising, or building an ad profile, and it is never shared with any third party or ad network.

05 How we share information

We share information only with service providers who help us run the App (our sub-processors), each bound by confidentiality and data-protection terms:

Beyond these providers, we disclose personal information only: (a) where required by law or a valid legal request, (b) to protect our rights, our users, or the public, or (c) at a Store's own instruction — for example, exporting a Shopper's data to fulfill a request under Section 7.

06 Data retention & deletion

• While the App is installed, we keep data for as long as needed to provide the features in Section 3 — for example, a completed queue entry is kept so a Store can see its own historical analytics and so an earned referral reward stays honored.
• If a Store uninstalls the App, every record tied to that store — including every Shopper's data — is automatically and permanently deleted from our systems within 48 hours.
• If a specific Shopper's data needs to be erased sooner, we act on Shopify's standard erasure process to anonymize that Shopper's email, phone number, and Shopify customer ID across our systems — retaining only the minimum, non-identifying data a Store needs for its own aggregate reporting (for instance, that a reward was earned, without who earned it).

07 Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to or restrict how we process it — for example, under the GDPR (EEA/UK) or the CCPA/CPRA (California).

• If you're a Shopper: please contact the store you interacted with first, since it's the party responsible for your data. The store can route a request to us, and we'll respond within the timeframe applicable law requires (generally within 30 days).
• If you're a Merchant: you can request an export or deletion of your store's data at any time using Section 12, or simply by uninstalling the App (see Section 6).

08 Data security

We use industry-standard safeguards to protect the information in this Policy, including encrypted connections (HTTPS/TLS) for all data in transit, securely stored authentication tokens, and API access scoped to only the permissions the App actually needs to function. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

09 Children's privacy

The App is not directed to, and we do not knowingly collect personal information from, children under the age of 16. If you believe a child has provided us with personal information, please contact us at Section 12 so we can delete it.

10 International transfers

Our service providers may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards — such as standard contractual clauses — to protect information transferred internationally.

11 Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we'll update the "Last updated" date at the top of this page. Continuing to use the App after a change takes effect means you accept the updated Policy.

12 Contact us