Privacy Policy

1. Controller and Contact

For personal data that Capchur controls, the data controller is Capchur.

For privacy requests, contact legal@capchur.it.

2. Who This Policy Applies To

This policy applies to:

• Visitors to capchur.it.
• Shopify merchants who contact, evaluate, or use Capchur.
• Visitors or customers of merchant Shopify stores whose email address, phone number, or related information may be collected through Capchur-powered pop-ups.

3. Our Role

Capchur acts as a controller for personal data that we collect for our own website, merchant contact and account management, billing, support, security, and product analytics.

For end-customer data collected through pop-ups on a merchant Shopify store, Capchur generally acts as a processor or service provider on behalf of the merchant. The merchant decides whether to run a pop-up, what data to collect, and how to use that data for marketing or other permitted purposes.

4. Personal Data We Process

Merchant data

We may process merchant names, email addresses, store or company names, Shopify store domains, phone numbers if provided, support/contact messages, account details, and billing information if paid plans or paid Shopify billing are used.

End-customer pop-up data

When a merchant uses Capchur on a Shopify store, we may process email addresses, phone numbers, consent status, timestamps, merchant/store context, campaign or pop-up metadata, and basic technical data such as IP address or user agent if logged.

Zero-party data

Capchur may support future capture experiences that collect information intentionally provided by end customers, such as quiz answers, preferences, or other responses submitted through a merchant capture experience.

Website and technical data

When you visit capchur.it or use Capchur, we may process technical data such as device, browser, page, cookie, and analytics data, depending on the features and providers active at that time.

5. Purposes and Legal Bases

We process personal data for the following purposes:

• Providing and operating Capchur.
• Helping merchants create and run pop-up capture experiences.
• Storing, exporting, syncing, or deleting captured data.
• Responding to inquiries and support requests.
• Managing merchant relationships and billing.
• Improving product performance, reliability, and usability.
• Protecting Capchur, merchants, end customers, and our services.
• Complying with legal, tax, accounting, and regulatory duties.

Where GDPR or similar laws apply, our legal bases may include performance of a contract, legitimate interests, consent, compliance with legal obligations, and processing on behalf of merchants under their instructions.

6. Cookies and Analytics

Capchur may use cookies and similar technologies for essential site and app operation, security, preferences, and analytics. We use PostHog for analytics.

Where required by law, non-essential analytics or marketing cookies will be used with consent. You may also be able to control cookies through your browser settings, though some features may not work properly without essential cookies.

7. Sharing and Service Providers

We share personal data with service providers that help us operate Capchur, subject to appropriate contractual and technical safeguards. Current provider categories include email, database/storage, analytics, Shopify billing/payment, and merchant-configured integrations.

Merchants may choose to connect Capchur to additional email, SMS, CRM, analytics, or marketing tools. In those cases, data may be sent to the integrations selected and configured by the merchant.

8. Retention

We keep personal data only for as long as reasonably needed for the purposes described in this policy, unless a longer period is required or permitted by law.

• Merchant, contact, and support data is retained while the relationship is active and then as needed for legal, tax, accounting, dispute, or security purposes.
• End-customer pop-up data is retained according to merchant instructions or settings, or until deleted/exported by the merchant, unless law requires longer retention.
• Marketing consent records may be retained while needed to prove consent or compliance.
• Analytics and security logs are retained for a limited period based on provider settings and operational needs.
• Billing and payment records are retained as required by tax and accounting law.

9. International Transfers

Capchur and its providers may process personal data in the EEA, UK, US, and other countries where those providers operate. Where EEA or UK personal data is transferred internationally, we rely on appropriate safeguards where required, such as standard contractual clauses or provider data transfer mechanisms.

10. Security

Capchur uses reasonable technical and organizational measures designed to protect personal data, including access controls and secure service providers. No internet service can be guaranteed to be completely secure.

11. Your Rights

Depending on your location and the role Capchur plays for the data involved, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data, object to certain processing, withdraw consent, or complain to a supervisory authority.

If your data was collected through a merchant store, the merchant is often the controller of that data. We may direct your request to the relevant merchant or support the merchant in responding to your request.

To make a request, contact legal@capchur.it. We may need to verify your identity before responding.

12. Children

Capchur is not intended for children. We do not knowingly collect personal data from children through capchur.it. Merchants are responsible for configuring their stores and capture experiences in compliance with laws that apply to their audiences.

13. Changes

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and provide additional notice where required by law.

14. Contact

For questions or requests about this Privacy Policy, contact legal@capchur.it.