Privacy Policy

Bespop SMS Flows ("the App") is operated by Bespop. This policy describes how the App collects, uses, and protects data when installed on a Shopify store.

Data We Collect

• Phone numbers — provided by customers who opt in to SMS marketing through the checkout extension.
• Subscriber information — opt-in status, tags, and the associated Shopify customer ID (when available).
• Message logs — records of SMS messages sent through the App, including delivery status and timestamps.

How We Use Data

Data is used solely to deliver the App's functionality: sending SMS messages on behalf of the merchant, managing subscriber lists, and reporting delivery analytics. We do not sell, rent, or share personal data with third parties for their own marketing purposes.

Third-Party Services

When configured by the merchant, the App transmits phone numbers and message content to Twilio for SMS delivery. Twilio's privacy practices are governed by Twilio's Privacy Policy.

Data Retention & Deletion

Subscriber data and message logs are retained while the App is installed. When a merchant uninstalls the App, all associated data is permanently deleted. Shopify GDPR webhooks (customer data request, customer redact, and shop redact) are fully supported to ensure compliance.

GDPR & Data Rights

The App processes data on behalf of the merchant (the data controller). End customers may exercise their data rights (access, correction, deletion) by contacting the merchant directly. The App responds to Shopify's mandatory GDPR webhooks to fulfill data requests and erasure obligations.

Contact

For privacy-related questions, contact support@bespop.com.