Start here
What data Ezzeefy uses
You are responsible for your customers' data, and Ezzeefy processes it on your instructions. That means you need to know what it holds. This page is the plain-language version; the privacy policy is the formal one.
What it holds
| Category | Where it comes from |
|---|---|
| Customers — email, name, phone, tags | Copied from Shopify and kept in sync |
| Orders — including line items | Copied from Shopify |
| Storefront activity — pages and products viewed, cart changes, checkout steps, referrer, browser | Your storefront, once consent allows |
| Form submissions — whatever your form asks for, plus the submitting IP | Your signup forms and popups |
| Consent records — channel, what was agreed to, and the IP it came from | Preference centre, forms, imports |
| Suppression lists — addresses and numbers that must not be contacted | Unsubscribes, bounces, SMS STOP |
Payment details are never involved. Those stay with Shopify and its payment providers.
What it calculates
On top of the above, Ezzeefy works out a lifecycle stage, an RFM tier, a churn risk, a predicted lifetime value and a likelihood to buy again for each customer. These drive segments, targeting and journeys.
They are arithmetic — weighted formulas applied to order and activity history on your own store. There is no machine-learning model, and no customer data is sent to any AI provider. They are recalculated daily.
How shoppers are recognised
A visitor ID is stored in a cookie so a returning shopper can be recognised across visits. Once someone identifies themselves — signs in, buys, submits a form — that ID is linked to their customer record.
Consent
Two separate pieces of Ezzeefy run on your storefront, and they treat consent differently. It is worth knowing which is which, because your own cookie notice needs to be accurate.
- The Web Pixel, which powers analytics, is tied to the shopper's analytics consent. Without it, no cookie is set and no customer details are attached — an event is still counted, with nothing identifying in it.
- The theme extension, which powers personalization and popups, checks Shopify's consent API but proceeds if that API is unavailable, and reads the preferences category rather than the analytics one. On a store without a consent banner wired to Shopify's API, it will run.
If you sell into the EU, the UK or California, make sure your consent banner uses Shopify's customer privacy API so both paths see the shopper's choice.
How long it is kept
Some activity data expires on a schedule:
| Data | Kept for |
|---|---|
| Storefront events | 90 days |
| Visitor behaviour summaries | 180 days from last activity |
| Product affinity records | 90 days from last view |
| Experiment events | 90 days |
Everything else — customers, orders, consent records, form submissions, sending history, suppression lists — is kept for as long as the app is installed, and removed on a deletion request or on uninstall.
Deletion requests
When a shopper asks you to delete their data, raise it through Shopify. Shopify notifies Ezzeefy automatically and it removes that person's records, including their storefront activity and the link between their visitor ID and their customer record.
Two things are deliberately kept:
- Their suppression entry. Deleting the record that someone opted out is the quickest way to contact them again by mistake, which is a worse outcome than holding the minimum needed to keep honouring it.
- Their orders. You have accounting and legal obligations attached to them, and Shopify remains the authoritative copy either way.
When you uninstall, your store's data is deleted — including suppression lists, since there is nothing left to send from. Export anything you want to keep before uninstalling.
What this means for you
You decide what is collected and what it is used for, which makes you the controller of your customers' data. You need a privacy notice telling shoppers that their activity is tracked, and a consent mechanism that covers it. Ezzeefy's suppression enforcement and consent records help you comply, but they are not a substitute for having permission in the first place.