Privacy Policy

Effective Date: January 1, 2026

Last Updated: January 1, 2026

1. Acceptance and Consent

By installing, accessing, or using Crux Analytics ("the Service," "we," "us," or "our"), you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, you must not install or use the Service.

Your continued use of the Service constitutes your ongoing consent to the collection, use, and processing of data as described herein. You represent and warrant that you have the authority to bind yourself and/or your organization to this Privacy Policy.

2. Information We Collect

When you install and use Crux Analytics, we automatically collect the following categories of information necessary to provide our analytics services:

• Store Information: Your Shopify store name, domain, store ID, and related merchant account information.
• Customer Journey Data: Page views, product views, cart events, add-to-cart actions, checkout initiations, and purchase behavior occurring on your store.
• Session Data: Anonymous session identifiers, timestamps, browser information, device types, IP addresses (which may be anonymized), and referral sources.
• Order Information: Order totals, product details, SKU information, and attribution data to measure marketing effectiveness.
• Technical Data: API interactions, error logs, and performance metrics necessary for service operation.

You acknowledge and consent to the collection of all data described above. This data collection is essential for the operation of the Service, and the Service cannot function without it.

3. How We Use Your Information

We use the collected information to:

• Provide customer journey analytics and attribution insights
• Generate product affinity reports and recommendations
• Visualize shopping behavior patterns through our analytics dashboard
• Improve, optimize, and develop new features for our services
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations and enforce our terms of service
• Aggregate and anonymize data for statistical analysis and benchmarking

4. Data Storage and Security

Your data is stored on Cloudflare's global infrastructure. While we implement industry-standard security measures including encryption in transit and at rest, access controls, and security monitoring, no method of transmission over the Internet or electronic storage is 100% secure.

We retain your data for as long as you have the app installed, plus a reasonable period afterward (typically 90 days) to allow for re-installation or data export requests. You may request deletion of your data at any time by contacting us.

5. Data Sharing

We do not sell your personal information. We may share data with the following parties:

• Service Providers: Third-party services that help us operate our application, including hosting providers, analytics services, and infrastructure partners.
• Legal Requirements: When required by law, court order, subpoena, or governmental or regulatory authority.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of all or a portion of our assets.
• Protection of Rights: When necessary to protect our rights, property, or safety, or that of our users or others.

6. Cookies and Tracking Technologies

Our pixel uses first-party cookies and similar tracking technologies to track customer sessions across your store. These technologies are essential for the Service to function and cannot be disabled while using the Service. By using the Service, you consent to the use of these tracking technologies on your store and acknowledge your responsibility to inform your customers accordingly.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access and receive a copy of your data
• Correct inaccurate or incomplete information
• Request deletion of your data
• Object to or restrict certain processing activities
• Data portability where applicable

To exercise these rights, contact us at privacy@cruxanalytics.io. We will respond to requests within the timeframe required by applicable law.

8. Your Responsibilities

As a user of the Service, you are responsible for:

• Ensuring you have the legal right to collect and process customer data through your store
• Updating your store's privacy policy to disclose the use of Crux Analytics and the data it collects
• Obtaining any necessary consents from your customers as required by applicable laws (including GDPR, CCPA, and other privacy regulations)
• Complying with all applicable laws and regulations regarding data collection and privacy

9. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR COURSE OF PERFORMANCE.

WE DO NOT WARRANT THAT (A) THE SERVICE WILL FUNCTION UNINTERRUPTED, SECURE, OR AVAILABLE AT ANY PARTICULAR TIME OR LOCATION; (B) ANY ERRORS OR DEFECTS WILL BE CORRECTED; (C) THE SERVICE IS FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS; (D) THE RESULTS OF USING THE SERVICE WILL MEET YOUR REQUIREMENTS; OR (E) THE DATA OR ANALYTICS PROVIDED WILL BE ACCURATE, COMPLETE, OR RELIABLE.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL CRUX ANALYTICS, ITS DIRECTORS, EMPLOYEES, PARTNERS, AGENTS, SUPPLIERS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM:

• YOUR ACCESS TO OR USE OF OR INABILITY TO ACCESS OR USE THE SERVICE
• ANY CONDUCT OR CONTENT OF ANY THIRD PARTY ON THE SERVICE
• ANY CONTENT OBTAINED FROM THE SERVICE
• UNAUTHORIZED ACCESS, USE, OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT
• DATA LOSS, CORRUPTION, OR INACCURACY
• ANY DECISIONS MADE OR ACTIONS TAKEN BASED ON THE ANALYTICS OR DATA PROVIDED BY THE SERVICE
• YOUR FAILURE TO COMPLY WITH APPLICABLE PRIVACY LAWS OR REGULATIONS

IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS EXCEED THE AMOUNT PAID BY YOU TO US FOR THE SERVICE DURING THE TWELVE (12) MONTHS PRIOR TO THE CLAIM, OR ONE HUNDRED DOLLARS ($100), WHICHEVER IS GREATER.

11. Indemnification

You agree to defend, indemnify, and hold harmless Crux Analytics, its directors, officers, employees, agents, licensors, and service providers, from and against any claims, liabilities, damages, judgments, awards, losses, costs, expenses, or fees (including reasonable attorneys' fees) arising out of or relating to:

• Your violation of this Privacy Policy
• Your violation of any applicable law, rule, or regulation, including privacy laws
• Your violation of any third-party right, including privacy rights
• Any claim that your use of the Service caused damage to a third party
• Your failure to obtain necessary consents from your customers for data collection
• Your failure to properly disclose data collection practices in your own privacy policy

12. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Changes are effective immediately upon posting.

Your continued use of the Service after any modifications indicates your acceptance of the updated Privacy Policy. It is your responsibility to review this Privacy Policy periodically for changes.

13. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. You agree to submit to the exclusive jurisdiction of the courts located in Delaware for the resolution of any disputes arising out of or relating to this Privacy Policy or the Service.

14. Severability

If any provision of this Privacy Policy is held to be unenforceable or invalid, such provision will be changed and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions will continue in full force and effect.

15. Entire Agreement

This Privacy Policy, together with our Terms of Service, constitutes the entire agreement between you and Crux Analytics regarding the use of the Service and supersedes all prior and contemporaneous understandings, agreements, representations, and warranties regarding the same.

16. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:

• Email: privacy@cruxanalytics.io
• Support: Through the Shopify app support channel

© 2026 Crux Analytics. All rights reserved.