This Privacy Policy explains how Zoketo LLC ("Zoketo", "we", "us") collects, uses and protects personal information when you visit zoketoapps.com and when merchants and their shoppers use our Shopify app, Zoketo: Popups & OTP Login (the "App").
1. Who we are
Zoketo LLC is based in Sharjah Media City, Sharjah, United Arab Emirates. For any privacy question or request, email [email protected].
We act in two roles:
- For visitors to our website and for merchants who install the App, we decide how your information is used. We are the "controller".
- For shoppers who use a popup or the login screen in a merchant's store, we process information on behalf of that merchant. The merchant is the controller, and we are their "processor" or service provider. Shoppers should read the merchant's own privacy policy and contact the merchant first about their information.
2. Information we collect on our website
- Forms you fill in. When you contact us, book a demo or subscribe to our newsletter, we collect what you enter: your name, email address, phone number, message, store URL, country, monthly visitors and preferred channel, along with the page you sent the form from.
- Technical information. Like any website, our hosting and security providers process your IP address, browser and device details, and the pages you request, to deliver the site and protect it from attacks.
- Bot protection. Our forms use Cloudflare Turnstile to check that a person, not a bot, is sending them. Turnstile processes technical signals from your browser for this check.
We do not use advertising cookies on our website. If we add analytics or advertising tools, we will ask for your consent where the law requires it and update this policy first.
3. Information processed through the App
About merchants. When you install the App, Shopify shares your store's details with us: the store name and domain, the account owner's name and email, your Shopify plan and the settings you choose in the App. Billing is handled by Shopify; we do not receive your card details.
About shoppers, on behalf of merchants. When a shopper uses a Zoketo popup or OTP login in a merchant's store, we process:
- the phone number they enter and the channel they choose (SMS or WhatsApp);
- the one-time code sent to them and whether it was verified;
- their marketing consent choice, if the merchant shows an opt-in box;
- details the merchant asks for in the popup, such as a name or email;
- profile details from Google or Facebook, if they choose to sign in with those accounts;
- technical information such as IP address, country, language and device, used to deliver the popup and to prevent fraud and coupon abuse.
Verified shoppers are saved as customers in the merchant's own Shopify store, with the tags the merchant sets.
4. How we use information
- To provide our website and the App, including sending one-time codes, unlocking discounts and creating Shopify customers for merchants.
- To answer your enquiries, run demos and give support.
- To send our newsletter and product updates, if you subscribed. Every email has an unsubscribe link.
- To keep our services secure and to prevent fraud, spam and abuse.
- To improve our website and the App.
- To meet our legal obligations and enforce our terms.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and protecting our services, your consent (for example, for our newsletter), or a legal obligation.
5. Who we share information with
We do not sell personal information. We share it only with:
- Shopify, which hosts merchants' stores, provides the App's platform and handles billing.
- Message delivery providers that send one-time codes by SMS, and Meta for codes sent through the WhatsApp Business Platform. When a merchant connects their own WhatsApp number, messages are sent and billed through the merchant's own Meta account.
- Infrastructure providers that host our website, content system and data, and protect them, such as Cloudflare and our cloud hosting providers, and the email service that delivers our notifications.
- Professional advisers and authorities, when the law requires it or to protect our rights, users and the public.
- A buyer or successor, if our business is reorganised, merged or sold, under the same protections.
6. International transfers
Our providers may process information outside your country, including outside the UAE and the European Economic Area. Where the law requires it, we use safeguards such as the European Commission's Standard Contractual Clauses.
7. How long we keep information
We keep personal information only as long as we need it for the purposes above, or as long as the law requires.
- Form submissions are kept while we handle your enquiry and for a reasonable period after it, then deleted.
- One-time codes are valid only for a short time and are not used again.
- When a merchant uninstalls the App, we delete that store's data after Shopify's data deletion request, which Shopify sends 48 hours after the uninstall. We also act on Shopify's requests to share or delete a shopper's data.
8. Security
We protect information with encryption in transit, access controls and limited access for our team. No system is completely secure, so we cannot guarantee absolute security, but we work to prevent, detect and respond to incidents.
9. Your rights
Depending on where you live, including under the UAE Personal Data Protection Law, the EU and UK GDPR, Saudi Arabia's PDPL and India's DPDP Act, you may have the right to:
- access the personal information we hold about you;
- correct it or ask us to delete it;
- object to or restrict how we use it;
- withdraw your consent at any time;
- receive a copy in a portable format.
To use these rights, email [email protected]. We may need to confirm your identity first. Shoppers should contact the merchant whose store they used; we will help the merchant respond. You can also complain to your local data protection authority.
10. Children
Our website and the App are not meant for children, and we do not knowingly collect children's information. If you believe a child has given us personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date, and tell merchants about important changes.
12. Contact us
Zoketo LLC, Sharjah Media City, Sharjah, United Arab Emirates. Email: [email protected].