Pickora Quiz
Pickora Quiz for SHOPLINE

Privacy Policy

This Privacy Policy explains how Pickora Quiz ("Pickora", "we", "us") processes information when SHOPLINE merchants install and use the app, and when shoppers interact with quizzes, recommendations, offers, and email experiences powered by Pickora.

Last updated: 2026-09-24App version: 0.11.29.29

1. Scope and roles

Pickora provides product recommendation quiz tools to SHOPLINE merchants. For merchant account, installation, security, and service-operation data, Pickora acts as the service provider responsible for operating the app. For shopper information collected through a merchant-created quiz, the merchant determines why the quiz is used and which optional fields are collected; Pickora processes that information to provide the quiz service on the merchant’s behalf.

A merchant may have its own privacy notice for its storefront and customer relationships. Shoppers should review the merchant’s privacy notice in addition to this policy.

2. Information we process

  • Merchant, store, and subscription information: SHOPLINE store handle and identifier, store name, primary domain, language, currency and sales-region information, installation/authorization timestamps, OAuth scopes, encrypted access credentials required to call authorized SHOPLINE APIs, and Pickora subscription state such as plan key, subscription status, trial state, enabled feature keys, and subscription start/end timestamps. Pickora does not receive payment-card numbers from SHOPLINE subscription billing.
  • Quiz configuration: quiz titles, descriptions, questions, answers, conditional-flow rules, recommendation paths, selected products and variants, fallback products, result/purchase settings, Reach targeting, Popup/launcher settings, Dedicated Quiz Page settings, lead-capture settings, Pickora Email/Klaviyo delivery ownership, email templates and timing, Quiz Offer configuration, and A/B experiment configuration.
  • Product information: product and variant identifiers, titles, images, handles/URLs, prices, publication status, variant availability metadata, and other catalog details needed to build and validate recommendations.
  • Shopper quiz submissions: answers, resolved result identity, recommended product and variant identifiers, matched recommendation paths, completion/purchase lifecycle state, and timestamps.
  • Optional lead and consent information: a shopper’s first name, last name, email address, and/or phone number only when the merchant enables Lead Capture and chooses those fields. Email collection is separate from email-marketing consent. When a merchant enables email marketing, Pickora records consent using the merchant-configured method: either an unchecked checkbox the shopper selects, or a submit-action notice that states submitting the email records marketing consent.
  • Pickora Email information: merchant sender settings, brand/from name, reply-to address, test-recipient history, per-Quiz delivery provider, email templates and step timing, recipient email, delivery status, provider request identifier, send timestamps, tracked product/result link clicks, and per-store unsubscribe preferences. Marketing follow-up steps are suppressed when required consent is absent or the recipient has unsubscribed.
  • Quiz Offer information: connected SHOPLINE discount campaign/code identifiers, offer eligibility and assignment state, assigned code, display/copy/email events, redemption state, and linked attributed order/discount amount. To avoid duplicate entitlement assignment for the same offer, Pickora may store hashed aliases derived from customer, email, or storefront visitor identifiers.
  • Order attribution information: for paid orders that contain Pickora attribution properties, Pickora may process the SHOPLINE order ID/name, paid time, currency, order total, attributed line items, attributed revenue, and the linked Quiz submission/result/recommendation context. Pickora does not process payment-card numbers.
  • Usage and diagnostic information: quiz views, starts, question answers, completions, product clicks, add-to-cart events, discount views/copies, locale, page URL, referrer, request identifiers, API usage counters, error diagnostics, and service-health events.
  • Browser storage: Pickora may store a randomly generated storefront visitor identifier, first-seen timestamp, new/returning-session state, auto-trigger state, and a completed-quiz submission identifier in localStorage or sessionStorage so targeting, one-time triggers, and result restoration work correctly.

3. Why we process information

  • Authenticate merchants, determine store context, keep the embedded SHOPLINE admin experience available, and apply the active Pickora subscription entitlements.
  • Create, save, publish, duplicate, preview, and operate quizzes.
  • Read SHOPLINE catalog data and validate whether configured recommendation products are still deliverable.
  • Evaluate quiz answers against merchant-defined recommendation rules and return product results.
  • Provide optional lead capture, Dedicated Quiz Pages, Quiz Offers and unique-code distribution, Pickora Email, Klaviyo synchronization, conditional flows, Reach targeting/automatic triggers, and A/B experiments.
  • Generate analytics such as views, starts, completion rate, question drop-off, product clicks, add-to-cart activity, offer activity, Pickora Email delivery/click activity, attributed paid orders, conversion rates, assisted order value, and quiz-attributed revenue.
  • Protect the service, troubleshoot failures, monitor reliability, prevent abuse, and improve product performance.
  • Comply with applicable legal obligations and respond to lawful requests.

4. SHOPLINE permissions

Pickora requires the SHOPLINE permissions currently needed for its published features: read_products, read_discounts, read_orders, write_orders, and read_store_information. Product access supports catalog search, variant resolution, and recommendation delivery checks. Discount read access supports syncing existing SHOPLINE discount campaigns and code pools for Quiz Offer distribution; Pickora does not create or edit discount rules and does not request write_discounts. read_orders supports paid-order reconciliation and merchant-requested historical backfill. write_orders is used only for merchant-enabled Order Data features, such as Pickora order metafields and the fixed quiz tag on qualifying paid orders; it is not used to change payment details or order totals. read_store_information is used for store metadata such as sales region, currency, store name, and primary domain. Pickora may also request optional read_content access to look up the published theme and build a direct Theme Editor setup link; core Quiz operation does not depend on that optional scope. Pickora does not request payment-card access and does not process card numbers.

5. How information is shared

We do not sell personal information. Information may be shared with infrastructure, hosting, database, security, monitoring, and other service providers only as needed to operate Pickora. Information is also exchanged with SHOPLINE when Pickora calls authorized SHOPLINE APIs or when storefront features interact with SHOPLINE product/cart functionality.

If a merchant connects Klaviyo, Pickora may send shopper contact identifiers, quiz-completion events, answers, recommendation context, optional Pickora Tags, and related properties to that merchant’s Klaviyo account according to the integration settings. Pickora only requests an email-marketing subscription when consent was recorded through the merchant-configured Quiz consent method, such as selecting a checkbox or submitting an email beside a clear marketing-consent notice.

If a merchant chooses Pickora Email as a Quiz’s delivery provider, Pickora sends the configured result/follow-up message through its email delivery infrastructure (currently Alibaba Cloud Direct Mail). The delivery provider receives the recipient address and message content needed to send the email. Pickora records delivery status and tracked redirect clicks for links generated by Pickora Email. Marketing follow-ups can include an unsubscribe link; an unsubscribe stops Pickora marketing follow-ups for that store, while a transactional result message may still be sent when configured and requested.

For paid orders attributed to Pickora, the merchant can enable Order Data so Pickora writes merchant-readable Quiz result and recommended-product fields to that SHOPLINE order. Merchants can separately enable the fixed quiz order tag; Pickora adds it only when a successfully paid order contains a product line that was added through a Pickora Quiz. Copying the shopper’s Quiz answers to the SHOPLINE order is a separate privacy-sensitive setting and is off by default. Pickora also keeps a private structured attribution field for its own order-linking logic when Order Data is enabled.

Operational monitoring may include store identifiers, app/version/environment information, aggregated API usage counters, and error diagnostics. Shopper lead fields are not required for operational monitoring.

6. Cookies and browser storage

The Pickora admin uses an HTTP-only session cookie named quiz_session after SHOPLINE authorization. In production it is sent securely and is configured for a limited session duration.

The storefront runtime primarily uses localStorage/sessionStorage for a random visitor identifier, new-versus-returning visitor logic, one-time auto-trigger suppression, debug preference when manually enabled, and restoration of a recently completed quiz. Merchants are responsible for presenting any cookie/storage consent notice required by the laws that apply to their storefront.

7. Data retention and deletion

We retain information for as long as reasonably necessary to provide and secure Pickora, maintain merchant configurations and analytics, preserve subscription/entitlement state, process email jobs and unsubscribe preferences, maintain Quiz Offer assignment/redemption integrity, meet legal obligations, and resolve disputes. Retention may vary by data type and operational requirement.

Deleting a quiz configuration does not necessarily remove historical submission or analytics records immediately. Merchants can remove a shopper’s contact information from the Customer workspace while retaining anonymized historical quiz responses for analytics. Requests involving broader store, submission, or analytics deletion can be sent to Pickora support. We may retain limited information where required for security, fraud prevention, legal compliance, or backup integrity.

8. Security

Pickora uses safeguards designed for the type of information it processes, including encrypted storage of SHOPLINE access tokens, HTTPS in production, HTTP-only admin session cookies, scoped SHOPLINE permissions, input validation, and service-health monitoring. No system can guarantee absolute security, and merchants should protect access to their SHOPLINE admin accounts.

9. International processing

Pickora and its service providers may process information in countries or regions different from the merchant or shopper. Where required, merchants remain responsible for providing storefront notices and obtaining consents or implementing transfer safeguards applicable to their customer relationships.

10. Privacy rights and requests

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to certain processing. Because shopper information is collected in the context of a merchant’s storefront, shoppers should normally contact that merchant first. Merchants can contact Pickora support for assistance with requests involving data stored by Pickora.

11. Children

Pickora is a merchant tool and is not designed specifically for children. Merchants are responsible for deciding whether their products, quizzes, and data-collection practices are appropriate for their audience and for obtaining any legally required parental consent.

12. Changes to this policy

We may update this Privacy Policy when Pickora’s features, data practices, or legal requirements change. The “Last updated” date on this page identifies the current published version.

13. Contact

For privacy, data-deletion, or security questions, Use the developer support channel shown on the Pickora Quiz listing in the SHOPLINE App Store..