Hushh Privacy Policy

Last updated: 8 July 2026

Hushh ("we", "the app") is a contact-form spam filter for Shopify stores, operated by Zippl. This policy explains what data the app processes and why. For the merchants who install Hushh, we act as a data processor; the merchant is the data controller for the customer messages sent through their store.

What we collect

• Contact form submissions: when a visitor submits the Hushh contact form on a merchant's store, we receive and store the name, email address, and message they entered, plus the page it was submitted from and a spam score.
• Store settings: the merchant's notification email address and spam-filtering preferences.
• Operational data: health-check results used to alert the merchant if their form breaks. We do not use analytics or advertising trackers.

Why we store submissions

Every submission is stored before it is scored or forwarded, so that a legitimate customer message is never lost — including messages our filter quarantines as suspected spam, which are kept for 30 days so a merchant can review and restore them before they are automatically deleted. Legitimate messages are forwarded to the merchant's notification email; the merchant then holds that data in their own inbox.

Who we share it with

We use two service providers strictly to operate the app:

• Resend — to deliver forwarded messages and alerts to the merchant's email address.
• Railway — hosting and database infrastructure.

We do not sell personal data or share it with anyone else.

Data retention and deletion

Stored submissions — both delivered messages and quarantined spam — are automatically deleted 30 days after they are received. Delivered messages have already been forwarded to the merchant's own inbox, and a merchant can review, restore, or delete a quarantined message before the 30 days elapse. The only exception is a message we could not deliver by email (a delivery failure), which is kept until the merchant resolves it so that a genuine message is never lost. Store settings, and anonymous aggregate counts (such as how many messages were blocked), are retained until the merchant uninstalls the app. We also honor Shopify's data-protection requests automatically:

• A customer data request returns the stored submissions for that customer to the merchant.
• A customer redaction request deletes that customer's stored submissions.
• When a merchant uninstalls the app, all of that store's data is deleted.

Merchants or their customers may also request deletion by emailing us.

Contact

Questions or data requests: hello@zippl.app